ECHA Review Day 3

Darius and Mathew were performing internal vulnerability scan within the corporate network and reported the results to his manager.Manager found that it was not performed correctly because there were some mismatches on comparing both of them. He was expecting the same results, as both the scans were performed at the same time, using the same tools and the same IP ranges. The results simply showed more findings in Darius' scan compared to Mathew's scan.What was the most probably root cause?

• Administrator of the scanned system updated most of the vulnerabilities
• One of the scan was blocked by IPS
• One of the scan was blocked by IDS
• Mathew's scan was blocked by Firewall

During an Xmas scan, what indicates a port is closed?

• RST
• SYN
• ACK
• No return response

An attacker is trying to redirect the traffic of a small office. That office is using their own mail server, DNS server and NTP server because of the importance of their jobs. The attacker gains access to the DNS server and redirects the direction www.google.com to his own IP address. Now, when the employees of the office want to go to Google, they are being redirected to the attacker's machine. What is the name of this kind of attack?

• DNS Spoofing
• ARP Poisoning
• Smurf Attack
• MAC Flooding

What type of analysis is performed when an attacker has partial knowledge of the inner-workings of the application?

• Announced
• White-box
• Black-box
• Grey-box

An enterprise recently moved to a new office, and the new neighborhood is a little risky. The CEO wants to monitor the physical perimeter and the entrance doors 24 hours. What is the best option to do this job?

• Use an IDS in the entrance doors and install some of them near the corners
• Install a CCTV with cameras pointing to the entrance doors and the street
• Use lights in all the entrance doors and along the company's perimeter
• Use fences in the entrance doors

Which method of password cracking takes the most time and effort?

• Dictionary attack
• Brute force
• Rainbow tables
• Shoulder surfing

Refers to the number of incorrect logon attempts permitted before a system locks an account. Each bad logon attempt is tracked by the bad logon counter

• account lockout
• Credential Guard
• polymorphic virus
• removable device

The process of identifying an individual

• authentication
• DMZ (demilitarized zone)
• risk avoidance
• risk

Describes a resource being accessible to a user

• availability
• DNS Security Extensions (DNSsec)
• risk mitigation
• Secure Content Management (SCM)

A type of attack that tries as many possible combinations of characters as time and money permit.

• brute force attack
• domain user
• Role
• security baseline