ECHA Review 2

The Orange County School system use quickbooks to manage their online purchasing of count school supplies. The use the Google Workspace for their email and document management. What type of agreement and/or governing guidance does Orange County School System and quickbooks work under?

• PCI-DSS

• Family Educational Rights and Privacy Act

• Privacy act of 1974

• NIST -800-53

The Orange County School system use quickbooks to manage their online purchasing of count school supplies. The use the Google Workspace for their email and document management. What type of agreement and/or governing guidance does Orange County School System and Google Workspace work under?

• Shrink wrap

• Click wrap

• Browse wrap

• Bacon wrap

Which of the following is not true regarding SSIDs?

• The SSID is broadcast by APs in the network unless otherwise configured.

• If the SSID changes, all clients must update to ·the new SSJD to communicate.

• Turning off the SSID broadcast ensures only authorized clients, who know the SSID, can connect.

• The SSID serves to identify wireless networks.

• SSTDs are case sensitive.

You have discovered an access point using WEP for encryption purposes. Which of the following is the best choice for uncovering the network key?

• NetStumbler

• Aircrack

• John the Ripper

• Kismet

A vendor is alerted of a newly discovered flaw in its software that presents a major vulnerability to systems. While working to prepare a fix action, the vendor releases a notice alerting the community of the discovered flaw and providing best practices to follow until the patch is available. Which of the following best describes the discovered flaw?

• Input validation flaw

• Shrink-wrap vulnerability

• Insider vulnerability

• Zero-day

From the partial e-mail header provided, which of the following represents the true originator of the e-mail message?

Return-path: <[e-mail]>

Delivery-date: Wed, 13 Apr 2011 00:31:13 +0200

Received: from mailexchanger.anotherbiz.com( [185.213.4. 77])

by mailserver.anotherbiz.com running ExIM with esmtp

id xxxxxx-xxxxxx-xxx; Wed, 13 Apr 2011 01:39:23 +0200

Received: from mailserver.anybiz.com ( [177 . 190.50.254] helo=mailserver

.anybiz.com)

by mailexchanger.anotherbiz.com with esmtp id xxxxxx-xxxxxx-xx

for [e-mail]; Wed, 13 Apr 2011 01:39:23 +0200

Received: from SOMEONEComputer [229.88.53.154 ] (helo= [SOMEONEcomputer])

by mailserver.anybiz.com with esmtpa (Exim x.xx)

(envelope- from <[e-mail]) id xxxxx-xxxxxx-xxxx

for [e-mail]; Tue , 12 Apr 2011 20:36:08 -0100

Message-ID: <[e-mail]>

Date: Tue, 12 Apr 2011 20:36:01 -0100

X-Mailer: Mail Client

From: SOMEONE Name <[e-mail]>

To : USERJOE Name <[e-mail]>

Subject: Something to consider

• The originator is 185.213.4.77.

• The originator is 177.190.50.254.

• The originator is 229.88.53.154.

• The e-mail header does not show this information.

Which Google operator is the best choice in searching for a particular string in the website's title?

• intext:

• inurl:

• site:

• intitle:

You are examining results of a SYN scan. A port returns a RST/ACK. What does this mean?

• The port is open.

• The port is closed.

• The port is filtered.

• Information about this port cannot be gathered.

You want to run a reliable scan but remain as stealthy as possible. Which of the following Nmap commands accomplishes your goal best?

• nmap -sN targetIPaddress

• nmap -sO targetIPaddress

• nmap -sS targetIPaddress

• nmap -sT targetIPaddress

Angie captures traffic using Wireshark. Which filter should she apply to see only packets sent from 220.99.88.77?

• ip = 220.99.88.77

• ip.src == 220.99.88.77

• ip.equals 220.99.88.77

• ip.addr == 220.99.88.77