Exam 4: Footprinting and Social Engineering

List the five techniques used by social engineers in their attempts to gain information from unsuspecting people.

The HTTP ____ method is the same as the GET method, but retrieves only the header information of an HTML document, not the document body.

Network attacks often begin by gathering information from a company's Web site.

The HTTP ____________________ method is used with a proxy that can dynamically switch to a tunnel connection, such as Secure Socket Layer (SSL).

As a security tester, should you use social-engineering tactics?

Wget is a tool that can be used to retrieve HTTP, HTTPS, and FTP files over the Internet.

Elaborate on the following statement: "The most difficult job of a security professional is preventing social engineers from getting crucial information from company employees."

To help prevent ____ attacks, you must educate your users not to type logon names and passwords when someone is standing directly behind them-or even standing nearby.

Why is ATM shoulder surfing much easier than computer shoulder surfing?

MATCHING Match each term with the correct statement below. -Request not made by client in allotted time

Some cookies can cause security issues because unscrupulous people might store personal information in cookies that can be used to attack a computer or server.

The HTTP ____ method retrieves data by URI.

A(n) ____________________ is a text file generated by a Web server and stored on a user's browser.

____ is the most basic HTTP method.

____ is a tool that is used to gather IP and domain information.

____ is a tool that is used to perform DNS zone transfers.

MATCHING Match each term with the correct statement below. -Request not understood by server

What is "competitive intelligence"?

The ____________________ utility gives you information on a company's IP addresses and any other domains the company might be part of.

The HTTP CONNECT method starts a remote application-layer loopback of the request message.