Question 1

The ____ certification for security professionals is issued by the International Information Systems Security Certifications Consortium (ISC²).

Accepted Answer

A) Global Information Assurance Certification (GIA
C)  
B) OSSTMM Professional Security Tester (OPST) 
C) Certified Information Systems Security Professional (CISSP) 
D) Certified Ethical Hacker (CEH) 
A) Global Information Assurance Certification (GIA
C)  
B) OSSTMM Professional Security Tester (OPST) 
C) Certified Information Systems Security Professional (CISSP) 
D) Certified Ethical Hacker (CEH) C

Question 2

In the context of penetration testing, what is the gray box model?

Accepted Answer

The gray box model is a hybrid of the white and black box models.In this model,the company gives a tester only partial information.For example,the tester might get information about which OSs are used,but not get any network diagrams.

Question 3

What is the SANS Institute Top 20 list?

Accepted Answer

One of the most popular SANS Institute documents is the Top 20 list,which details the most common network exploits and suggests ways of correcting vulnerabilities.This list offers a wealth of information for penetration testers or security professionals.

Question 4

MATCHING
Match each term with the correct statement below.
a.script
f.packet monkey
b.red team
g.hacker
c.black box model
h.gray box model
d.packet monkey
i.ethical hacker
e.IRC "bot"
-sometimes employed by companies to perform penetration tests

Accepted Answer

The answer of MATCHING
Match each term with the correct statement...

Question 5

Even though you might think you're following the requirements set forth by the client who hired you to perform a security test, don't assume that management will be happy with your results. Provide an example of an ethical hacking situation that might upset a manager.

Accepted Answer

One tester was reprimanded by a manager

Question 6

Even though the Certified Information Systems Security Professional (CISSP) certification is not geared toward the technical IT professional, it has become one of the standards for many security professionals.

Accepted Answer

A) True 
 B)False

Question 7

What are four different skills a security tester needs?

Accepted Answer

-Knowledge of network and computer techn

Question 8

Many experienced penetration testers can write computer programs or ____ in Perl or the C language to carry out network attacks.

Accepted Answer

A) kiddies 
B) packets 
C) scripts 
D) crackers 
A) kiddies 
B) packets 
C) scripts 
D) crackers

Question 9

MATCHING
Match each term with the correct statement below.
a.script
f.packet monkey
b.red team
g.hacker
c.black box model
h.gray box model
d.packet monkey
i.ethical hacker
e.IRC "bot"
-copies code from knowledgeable programmers instead of creating the code himself/herself

Accepted Answer

The answer of MATCHING
Match each term with the correct statement...

Question 10

MATCHING
Match each term with the correct statement below.
a.script
f.packet monkey
b.red team
g.hacker
c.black box model
h.gray box model
d.packet monkey
i.ethical hacker
e.IRC "bot"
-composed of people with varied skills who perform penetration tests

Accepted Answer

The answer of MATCHING
Match each term with the correct statement...

Question 11

In a(n) ____, the tester does more than attempt to break in; he or she also analyzes the company's security policy and procedures and reports any vulnerabilities to management.

Accepted Answer

A) penetration test 
B) security test 
C) hacking test 
D) ethical hacking test 
A) penetration test 
B) security test 
C) hacking test 
D) ethical hacking test

Question 12

MATCHING
Match each term with the correct statement below.
a.script
f.packet monkey
b.red team
g.hacker
c.black box model
h.gray box model
d.packet monkey
i.ethical hacker
e.IRC "bot"
-program that sends automatic responses to users, giving the appearance of a person being present on the other side of the connection

Accepted Answer

The answer of MATCHING
Match each term with the correct statement...

Question 13

Some hackers are skillful computer operators, but others are younger inexperienced people who experienced hackers refer to as ____.

Accepted Answer

A) script kiddies 
B) repetition monkeys 
C) packet sniffers 
D) crackers 
A) script kiddies 
B) repetition monkeys 
C) packet sniffers 
D) crackers

Question 14

An April 2009 article in USA Today revealed that the federal government is looking for ____ to pay them to secure the nation's networks.

Accepted Answer

A) crackers 
B) IT professionals 
C) hackers 
D) security testers 
A) crackers 
B) IT professionals 
C) hackers 
D) security testers

Question 15

The SysAdmin, Audit, Network, Security (SANS) Institute offers training and IT security certifications through Global Information Assurance Certification (GIAC).

Accepted Answer

A) True 
 B)False

Question 16

List at least five domains tested for the Certified Ethical Hacker (CEH) exam.

Accepted Answer

-Ethicsandlegalissues
-Footprinting
-Sca

Question 17

MATCHING
Match each term with the correct statement below.
a.script
f.packet monkey
b.red team
g.hacker
c.black box model
h.gray box model
d.packet monkey
i.ethical hacker
e.IRC "bot"
-the tester might get information about which OSs are used, but not get any network diagrams

Accepted Answer

The answer of MATCHING
Match each term with the correct statement...

Question 18

The ____ Institute Top 20 list details the most common network exploits and suggests ways of correcting vulnerabilities.

Accepted Answer

A) SANS 
B) CompTIA 
C) CERT 
D) ISECOM 
A) SANS 
B) CompTIA 
C) CERT 
D) ISECOM

Question 19

In the ____ model, the company might print a network diagram showing all the company's routers, switches, firewalls, and intrusion detection systems (IDSs) or give the tester a floor plan detailing the location of computer systems and the OSs running on these systems.

Accepted Answer

A) black box 
B) white box 
C) red box 
D) gray box 
A) black box 
B) white box 
C) red box 
D) gray box

Question 20

The U.S. government now has a new branch of computer crime called __________________________________________________.

Accepted Answer

computer hacking and

The ____ certification for security professionals is issued by the International Information Systems Security Certifications Consortium (ISC²).

In the context of penetration testing, what is the gray box model?

What is the SANS Institute Top 20 list?

MATCHING Match each term with the correct statement below. a.script f.packet monkey b.red team g.hacker c.black box model h.gray box model d.packet monkey i.ethical hacker e.IRC "bot" -sometimes employed by companies to perform penetration tests

Even though you might think you're following the requirements set forth by the client who hired you to perform a security test, don't assume that management will be happy with your results. Provide an example of an ethical hacking situation that might upset a manager.

Even though the Certified Information Systems Security Professional (CISSP) certification is not geared toward the technical IT professional, it has become one of the standards for many security professionals.

What are four different skills a security tester needs?

Many experienced penetration testers can write computer programs or ____ in Perl or the C language to carry out network attacks.

MATCHING Match each term with the correct statement below. a.script f.packet monkey b.red team g.hacker c.black box model h.gray box model d.packet monkey i.ethical hacker e.IRC "bot" -copies code from knowledgeable programmers instead of creating the code himself/herself

MATCHING Match each term with the correct statement below. a.script f.packet monkey b.red team g.hacker c.black box model h.gray box model d.packet monkey i.ethical hacker e.IRC "bot" -composed of people with varied skills who perform penetration tests

In a(n) ____, the tester does more than attempt to break in; he or she also analyzes the company's security policy and procedures and reports any vulnerabilities to management.

Some hackers are skillful computer operators, but others are younger inexperienced people who experienced hackers refer to as ____.

An April 2009 article in USA Today revealed that the federal government is looking for ____ to pay them to secure the nation's networks.

The SysAdmin, Audit, Network, Security (SANS) Institute offers training and IT security certifications through Global Information Assurance Certification (GIAC).

List at least five domains tested for the Certified Ethical Hacker (CEH) exam.

MATCHING Match each term with the correct statement below. a.script f.packet monkey b.red team g.hacker c.black box model h.gray box model d.packet monkey i.ethical hacker e.IRC "bot" -the tester might get information about which OSs are used, but not get any network diagrams

The ____ Institute Top 20 list details the most common network exploits and suggests ways of correcting vulnerabilities.

In the ____ model, the company might print a network diagram showing all the company's routers, switches, firewalls, and intrusion detection systems (IDSs) or give the tester a floor plan detailing the location of computer systems and the OSs running on these systems.

The U.S. government now has a new branch of computer crime called __________________________________________________.

Tcpip Concepts Review

Network and Computer Attacks

Footprinting and Social Engineering

Port Scanning

Enumeration

Programming for Security Professionals

Desktop and Server Os Vulnerabilities

Embedded Operating Systems: The Hidden Threat

Hacking Web Servers

Hacking Wireless Networks

Cryptography

Network Protection Systems

Filters

Exam 1: Ethical Hacking Overview

The ____ certification for security professionals is issued by the International Information Systems Security Certifications Consortium (ISC²).

In the context of penetration testing, what is the gray box model?

What is the SANS Institute Top 20 list?

MATCHING Match each term with the correct statement below. a.script f.packet monkey b.red team g.hacker c.black box model h.gray box model d.packet monkey i.ethical hacker e.IRC "bot" -sometimes employed by companies to perform penetration tests

Even though you might think you're following the requirements set forth by the client who hired you to perform a security test, don't assume that management will be happy with your results. Provide an example of an ethical hacking situation that might upset a manager.

Even though the Certified Information Systems Security Professional (CISSP) certification is not geared toward the technical IT professional, it has become one of the standards for many security professionals.

What are four different skills a security tester needs?

Many experienced penetration testers can write computer programs or ____ in Perl or the C language to carry out network attacks.

MATCHING Match each term with the correct statement below. a.script f.packet monkey b.red team g.hacker c.black box model h.gray box model d.packet monkey i.ethical hacker e.IRC "bot" -copies code from knowledgeable programmers instead of creating the code himself/herself

MATCHING Match each term with the correct statement below. a.script f.packet monkey b.red team g.hacker c.black box model h.gray box model d.packet monkey i.ethical hacker e.IRC "bot" -composed of people with varied skills who perform penetration tests

In a(n) ____, the tester does more than attempt to break in; he or she also analyzes the company's security policy and procedures and reports any vulnerabilities to management.

Some hackers are skillful computer operators, but others are younger inexperienced people who experienced hackers refer to as ____.

An April 2009 article in USA Today revealed that the federal government is looking for ____ to pay them to secure the nation's networks.

The SysAdmin, Audit, Network, Security (SANS) Institute offers training and IT security certifications through Global Information Assurance Certification (GIAC).

List at least five domains tested for the Certified Ethical Hacker (CEH) exam.

MATCHING Match each term with the correct statement below. a.script f.packet monkey b.red team g.hacker c.black box model h.gray box model d.packet monkey i.ethical hacker e.IRC "bot" -the tester might get information about which OSs are used, but not get any network diagrams

The ____ Institute Top 20 list details the most common network exploits and suggests ways of correcting vulnerabilities.

In the ____ model, the company might print a network diagram showing all the company's routers, switches, firewalls, and intrusion detection systems (IDSs) or give the tester a floor plan detailing the location of computer systems and the OSs running on these systems.

The U.S. government now has a new branch of computer crime called __________________________________________________.

Tcpip Concepts Review

Network and Computer Attacks

Footprinting and Social Engineering

Port Scanning

Enumeration

Programming for Security Professionals

Desktop and Server Os Vulnerabilities

Embedded Operating Systems: The Hidden Threat

Hacking Web Servers

Hacking Wireless Networks

Cryptography

Network Protection Systems

Filters