Q320. You have compromised a server on a network and successfully opened a shell. You aimed to identify all operating systems running on the network. However, as you attempt to fingerprint all machines in the network using the nmap syntax below, it is not going through.

What seems to be wrong?

Q321. A tester has been using the msadc.pl attack script to execute arbitrary commands on a Windows NT4 web server. While it is effective, the tester finds it tedious to perform extended functions. On further research, the tester come across a perl script that runs the following msadc functions:

Which exploit is indicated by this script?

Q322. Which of the following is considered the best way to protect Personally Identifiable Information (PII) from Web application vulnerabilities?

Q323. What attack is used to crack passwords by using a precomputed table of hashed passwords?

Q324. What are two things that are possible when scanning UDP ports? (Choose two.)

Q325. You are a Penetration Tester and are assigned to scan a server. You need to use a scanning technique wherein the TCP Header is split into many packets so that it becomes difficult to detect what the packets are meant for.
Which of the below scanning technique will you use?

Q326. Which system consists of a publicly available set of databases that contain domain name registration contact information?

Q327. Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results?

Q328. Which initial procedure should an ethical hacker perform after being brought into an organization?

Q329. Company A and Company B have just merged and each has its own Public Key Infrastructure (PKI). What must the Certificate Authorities (CAs) establish so that the private PKIs for Company A and Company B trust one another and each private PKI can validate digital certificates from the other company?

Q330. Which of the following lists are valid data-gathering activities associated with a risk assessment?

Q331. Which of the following is considered an exploit framework and has the ability to perform automated attacks on services, ports, applications and unpatched security flaws in a computer system?

Q332. It is a regulation that has a set of guidelines, which should be adhered to by anyone who handles any electronic medical data. These guidelines stipulate that all medical practices must ensure that all necessary measures are in place while saving, accessing, and sharing any electronic medical data to keep patient data secure.
Which of the following regulations best matches the description?

Q333. Which of the following is a hardware requirement that either an IDS/IPS system or a proxy server must have in order to properly function?

Q334. If executives are found liable for not properly protecting their company’s assets and information systems, what type of law would apply in this situation?

Q335. Sid is a judge for a programming contest. Before the code reaches him it goes through a restricted OS and is tested there. If it passes, then it moves onto Sid. What is this middle step called?

Q336. You have several plain-text firewall logs that you must review to evaluate network traffic. You know that in order to do fast, efficient searches of the logs you must use regular expressions.
Which command-line utility are you most likely to use?