Question 1

In the United States, attacks on financial institutions are handled by:

Accepted Answer

A)  The GLBA (Graham Leach Bliley Act) 
B)  The FBI 
C)  The Secret Service 
D)  A free market society has no such crime. It is a moral imperative that to the winner "goes the spoils." If you can work the system then it works for you.

Question 2

Which of the following statements are most true? (Choose two)

Accepted Answer

A)  The law recognizes a difference between a computer being used in a crime and when a computer is the target of a crime 
B)  The Freedom of Information Act guarantees the fair use and exchange of all information materials 
C)  The law has definitive distinctions between what is "important" versus "unimportant" information 
D)  Penalties increase dramatically if human life has been put in danger

Question 3

What is the threshold for the amount of damage an organization must sustain before federal law enforcement will get involved?

Accepted Answer

A)  $1,000 
B)  $5,000 
C)  $10,000 
D)  There is no lower limit

Question 4

"Periodic assessments of the risk and magnitude of the harm that could result from unauthorized access, use, disclosure, disruption, modification, or destruction of information and information systems that support the operations and assets of the agency;"
Which act mandates a security program be implemented in a Federal agency that meets the above criteria?

Accepted Answer

A)  Directive 8570 
B)  FISMA 
C)  FISO 
D)  The Homeland Security Act

Question 5

Tom sees Jerry walking quickly up to a door that is protected by a proximity card. Jerry looks like he is in a hurry and has something on his mind. Tom runs up alongside him and starts a distracting conversation. As Jerry opens the door, his body language suggests that he wants to get away from Tom but Tom just gets more aggressive and walks in behind him through the door.
Once inside, he gives up and tells Jerry to have a nice day. What has Tom done?

Accepted Answer

A)  Clever talking 
B)  Door jamming 
C)  Tailgating 
D)  Mantrapping

Question 6

Easton is hired by a materials company to investigate why a competitor seems to be able to apply for patents for exactly the same technologies faster than they can. The competitor doesn't even produce or make anything, they seem to exist only to sit on patents.
Easton finds John, a proud father and dog owner that is always bringing new pictures into the office on a USB key. He loads them onto his computer each morning, tries to show them to coworkers as they walk past, then copies them back onto the USB key in the afternoon. Since it is just pictures of his children and his dogs, no one thought anything of it.
At the very least, John might be abusing company time editing his photos, but there is no such software on his system.
What activity does Easton suspect John is up to?

Accepted Answer

A)  Picture fuzzing 
B)  Steganography 
C)  Cryptography 
D)  Reverse Social Engineering

Question 7

Milo is trying to learn all he can about a network. He is looking for easy things he can do that might reveal information. Eventually, he can collect all of that data and after analysis learn perhaps enough to have a complete picture. One technique is to send email to email addresses with different status such as; valid users, non-existent addresses, users on vacation, employees that are no longer there, and commonly named email groups.
What would be a reason for doing this?

Accepted Answer

A)  To verify information about the email administrator 
B)  Gather information about internal hosts 
C)  See how the IT department responds to a Denial of service attack 
D)  To learn about the internal policies for handling such events

Question 8

It is considered that 60%-70% of all attacks come from insiders. Which of the following group or individual is not an insider?

Accepted Answer

A)  Disgruntled Employee 
B)  Suppliers and Venders 
C)  CEO 
D)  Business Partners and consultants

Question 9

Which of the following types of hosts are placed on a network to attract the attention of a malicious attacker and allow the administrators to observe their actions?

Accepted Answer

A)  Honeypot 
B)  Bastion host 
C)  Intrusion Detection System 
D)  A Windows 98 machine

Question 10

our employer has asked you to perform an audit of the passwords for the user accounts for a particular server. What type of test have you been assigned?

Accepted Answer

A)  White Box test 
B)  Grey Box test 
C)  Black Box test 
D)  Grey Hat test

Question 11

Hosts can often be attacked in layers. If the target service is not vulnerable then what else should the attacker try? (Choose two)

Accepted Answer

A)  Annoy the administrator of that host with a Denial of Service attack 
B)  If the target service is secure there is nothing else that can be done 
C)  Convince a user to accept a malicious file into one of the clients on the host 
D)  Attack a service on one of the other open ports

Question 12

If a White Hat researcher discovers a vulnerability in a software product, what should she do with the information?

Accepted Answer

A)  Create a tutorial complete with screenshots and submit the finding to digg.com and slashdot.org 
B)  Call the vendor and offer to keep quiet if they pay you a finder's fee 
C)  Prove the exploit works, then sell a script on eBay 
D)  Report the vulnerability to a regional emergency response organization

Question 13

Which of the following (choose two) acts were meant to protect the illegal use of computers by unauthorized parties, but many argue that they in fact had the opposite effect? The laws could enable unsolicited email and usage monitoring.

Accepted Answer

A)  CAN-SPAM ACT 
B)  SPY Act 
C)  Intellectual Properties and Protection Act 
D)  Free Speech in Advertising Act

Question 14

Gary is using an email system that allows web based access and is popular among employees of the company he is attacking. He is testing this system to see if there is a way to gain access to other users accounts. He signs up for an account and begins to use it. He notices in the URL that information about his account name is present:
Http://mail.exampleco.com/inbox.aspx?lang=en&mailbox=Gary+Tennenbaum
He replaces his name with someone else's name in the target company that he gathered from a job posting site. What attack is he attempting?

Accepted Answer

A)  URL obfuscation attack 
B)  Directory traversal attack 
C)  Query string parameter manipulation attack 
D)  A path string attack

Question 15

Once efforts to setup blacklists were created and high profile spammers were starting to get receives prison sentences, one would think they would be discouraged. Nope. Which of the following is a technique that is now used to distribute SPAM and cloak its sender?

Accepted Answer

A)  Social Networks 
B)  SMS, Skype, and IM SPAM 
C)  Spear phishing 
D)  Botnets

Question 16

Which of the following protects the rights of individuals in regard to the disclosing of information? (Choose two)

Accepted Answer

A)  The Human Rights act of 1998 (UK) 
B)  The Google Act of 2003 
C)  Privacy Act of 1974 
D)  There are no such rights

Question 17

What are the 6 principles of social engineering?

Accepted Answer

A)  Authority, Scarcity, Liking, Reciprocation, Commitment, Intimidation 
B)  Authority, Scarcity, Liking, Reciprocation, Consistency, Social Validation 
C)  Authority, Scarcity, Complimenting, Reciprocation, Consistency, Social Validation 
D)  Intimidation, Scarcity, Liking, Reciprocation, Charisma, Social Validation

Question 18

Which of the following is considered to be the most dangerous vector of security threats?

Accepted Answer

A)  Unpatched operating systems 
B)  Natural Disasters 
C)  DD0S (Distributed Denial of Service) 
D)  Social engineering

Question 19

Which of the following statements is the most correct about the DMCA?

Accepted Answer

A)  Circumventing copyright protections is permissible if they can be defeated. The responsibility lies on the rights holder to enforce protection adequately. 
B)  The "Librarian of Congress" can issue exceptions to the circumventing of copyright protections that the DMCA addresses. 
C)  The DMCA stands for the "Digital Mandates for Circumvention of Assets" Act. It implements treaties established by WIPO (World Intellectual Property Organization). 
D)  The DMCA protects the attacker by defining reverse engineering as "The legitimate act of research" and "an inherent right of each user."

Question 20

You are conducting a test and got caught. What document will ensure that you are protected from negative consequences within the target company?

Accepted Answer

A)  Indemnity Claus 
B)  "Get out of jail free" card 
C)  Rules of engagement 
D)  Non-disclosure agreement

Exam 1: Ethical Hacking and Testing