Question 1

With ____, a user is tricked into giving private information about his or her account with a known large organization.

Accepted Answer

A) conformity 
B) phishing 
C) deception 
D) pharming 
A) conformity 
B) phishing 
C) deception 
D) pharming B

Question 2

Describe some illegal reconnaissance activities.

Accepted Answer

There are a number of plainly illegal reconnaissance techniques. Developing a "front" company and acting as a representative of that company, specifically for the purpose of robbing or defrauding the target company, is probably illegal. Furthermore, being expensive and time consuming, this is probably reserved for the professional intel agencies. Stealing garbage is illegal in many locales. Entering a home or office to look for information is also illegal, but this often goes undetected as no valuables are being removed. Dropping a keylogger-a tool that records users' keystrokes-on a vulnerable machine is illegal. Leaving a sniffer, which can intercept and read data packets, on a network is illegal.

Question 3

Reconnaissance is not by definition illegal, and many reconnaissance techniques are completely legal.

Accepted Answer

A) True 
 B)False  True

Question 4

Describe conformity as a social engineering technique.

Accepted Answer

This method hinges on the general tenden

Question 5

Newsgroups are part of an online bulletin board system called ____, which contains groups covering a huge variety of subjects.

Accepted Answer

A) GROUPS 
B) ARPANET 
C) USENET 
D) NEWSNET 
A) GROUPS 
B) ARPANET 
C) USENET 
D) NEWSNET

Question 6

The Linux command ____________________ shows you where the files appear in your PATH.

Accepted Answer

The answer of The Linux command ____________________ shows you where...

Question 7

There are two ping utilities available for a Linux or Unix machine: ping and ____________________.

Accepted Answer

The answer of There are two ping utilities available for...

Question 8

____ is an Internet tool that aids in retrieving domain name-specific information from the NSI Registrar database.

Accepted Answer

A) WHOIS 
B) Locate 
C) DNS 
D) Whereis 
A) WHOIS 
B) Locate 
C) DNS 
D) Whereis

Question 9

Most social engineering attacks are opportunistic: the hacker uses whatever technique he or she thinks fits the situation.

Accepted Answer

A) True 
 B)False

Question 10

____ is a method of achieving access to information by actually joining the organization as an employee or a consultant.

Accepted Answer

A) Deception 
B) Bribery 
C) Impersonation 
D) Conformity 
A) Deception 
B) Bribery 
C) Impersonation 
D) Conformity

Question 11

____________________ is the act of locating targets and developing the methods necessary to attack those targets successfully.

Accepted Answer

The answer of ____________________ is the act of locating targets...

Question 12

The strongest link in any security scheme is the user.

Accepted Answer

A) True 
 B)False

Question 13

Breaking CD-ROMs is sufficient to destroy their data, as data cannot be recovered from broken disks.

Accepted Answer

A) True 
 B)False

Question 14

____________________ is a DNS feature that lets a DNS server update its database with the list of domain names in another DNS server.

Accepted Answer

The answer of ____________________ is a DNS feature that lets...

Question 15

Describe some legal reconnaissance activities.

Accepted Answer

Looking up all of the information about

Question 16

____________________ is the process of identifying domain names as well as other resources on the target network.

Accepted Answer

The answer of ____________________ is the process of identifying domain...

Question 17

____ uses influence and persuasion to deceive people by convincing them that the social engineer is someone he isn't, or by manipulation.

Accepted Answer

A) Network enumeration 
B) Network penetration 
C) Social enumeration 
D) Social engineering 
A) Network enumeration 
B) Network penetration 
C) Social enumeration 
D) Social engineering

With ____, a user is tricked into giving private information about his or her account with a known large organization.

Describe some illegal reconnaissance activities.

Reconnaissance is not by definition illegal, and many reconnaissance techniques are completely legal.

Describe conformity as a social engineering technique.

Newsgroups are part of an online bulletin board system called ____, which contains groups covering a huge variety of subjects.

The Linux command ____________________ shows you where the files appear in your PATH.

There are two ping utilities available for a Linux or Unix machine: ping and ____________________.

____ is an Internet tool that aids in retrieving domain name-specific information from the NSI Registrar database.

Most social engineering attacks are opportunistic: the hacker uses whatever technique he or she thinks fits the situation.

____ is a method of achieving access to information by actually joining the organization as an employee or a consultant.

____________________ is the act of locating targets and developing the methods necessary to attack those targets successfully.

The strongest link in any security scheme is the user.

Breaking CD-ROMs is sufficient to destroy their data, as data cannot be recovered from broken disks.

____________________ is a DNS feature that lets a DNS server update its database with the list of domain names in another DNS server.

Describe some legal reconnaissance activities.

____________________ is the process of identifying domain names as well as other resources on the target network.

____ uses influence and persuasion to deceive people by convincing them that the social engineer is someone he isn't, or by manipulation.

Ethics of Hacking and Cracking

Scanning Tools

Sniffers

TCP/IP Vulnerabilities

Encryption and Password Cracking

Spoofing

Session Hijacking

Hacking Network Devices

Trojan Horses

Denial-Of-Service Attacks

Buffer Overflows

Programming Exploits

Mail Vulnerabilities

Web Application Vulnerabilities

Windows Vulnerabilities

Unix/Linux Vulnerabilities

Incident Handling

Filters

Exam 2: Reconnaissance

With ____, a user is tricked into giving private information about his or her account with a known large organization.

Describe some illegal reconnaissance activities.

Reconnaissance is not by definition illegal, and many reconnaissance techniques are completely legal.

Describe conformity as a social engineering technique.

Newsgroups are part of an online bulletin board system called ____, which contains groups covering a huge variety of subjects.

The Linux command ____________________ shows you where the files appear in your PATH.

There are two ping utilities available for a Linux or Unix machine: ping and ____________________.

____ is an Internet tool that aids in retrieving domain name-specific information from the NSI Registrar database.

Most social engineering attacks are opportunistic: the hacker uses whatever technique he or she thinks fits the situation.

____ is a method of achieving access to information by actually joining the organization as an employee or a consultant.

____________________ is the act of locating targets and developing the methods necessary to attack those targets successfully.

The strongest link in any security scheme is the user.

Breaking CD-ROMs is sufficient to destroy their data, as data cannot be recovered from broken disks.

____________________ is a DNS feature that lets a DNS server update its database with the list of domain names in another DNS server.

Describe some legal reconnaissance activities.

____________________ is the process of identifying domain names as well as other resources on the target network.

____ uses influence and persuasion to deceive people by convincing them that the social engineer is someone he isn't, or by manipulation.

Ethics of Hacking and Cracking

Scanning Tools

Sniffers

TCP/IP Vulnerabilities

Encryption and Password Cracking

Spoofing

Session Hijacking

Hacking Network Devices

Trojan Horses

Denial-Of-Service Attacks

Buffer Overflows

Programming Exploits

Mail Vulnerabilities

Web Application Vulnerabilities

Windows Vulnerabilities

Unix/Linux Vulnerabilities

Incident Handling

Filters