Certified Ethical Hacker 1

The Payment Card Industry Data Security Standard (PCI DSS) contains six different categories of control objectives. Each objective contains one or more requirements, which must be followed in order to achieve compliance. Which of the following requirements would best fit under the objective, "Implement strong access control measures"?

• Regularly test security systems and processes.

• Encrypt transmission of cardholder data across open, public networks.

• Assign a unique ID to each person with computer access.

• Use and regularly update anti-virus software on all systems commonly affected by malware.

Which of the following act requires employer's standard national numbers to identify them on standard transactions?

• SOX

• HIPAA

• DMCA

• PCI DSS

Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE?

• http-git

• http-headers

• http enum

• http-methods

Sid is a judge for a programming contest. Before the code reaches him it goes through a restricted OS and is tested there. If it passes, then it moves onto Sid. What is this middle step called?

• Fuzzy-testing the code

• Third party running the code

• Sandboxing the code

• String validating the code

What is the process of logging, recording, and resolving events that take place in an organization?

• Incident Management Process

• Protection Policy

• Security Policy

• Metrics

A hacker has managed to gain access to a Linux host and stolen the password file from /etc/passwd. How can he use it?

• The password file does not contain the passwords themselves.

• He can open it and read the user ids and corresponding passwords.

• He can open it and read the user ids and corresponding passwords.

• He cannot read it because it is encrypted.

Darius is analysing IDS logs. During the investigation, he noticed that there was nothing suspicious found and an alert was triggered on normal web application traffic. He can mark this alert as:

• False-Negative

• False-Positive

• True-Positive

• False-Signature

What is the proper response for a NULL scan if the port is closed?

• SYN

• ACK

• FIN

• PSH

• RST

A recent security audit revealed that there were indeed several occasions that the company's network was breached. After investigating, you discover that your IDS is not configured properly and therefore is unable to trigger alarms when needed. What type of alert is the IDS giving?

• True Positive

• False Negative

• False Positive

• True Negative

Which of the following is used to indicate a single-line comment in structured query language (SQL)?

• --

• ||

• %%

• ''