Chapter 5. Computer Science & Information Technology - Information Technology

1

The Net view command can be used to see whether there are any shared resources on a server.

2

Enumeration of Windows systems can be more difficult if port _______ is filtered.

3

Security testers conduct enumeration for which of the following reasons? (Choose all that apply.)

4

Which of the following testing processes is the most intrusive?

5

Before conducting a security test by using social-engineering tactics, what should you do?

6

What social-engineering technique involves telling an employee that you're calling from the CEO's office and need certain information ASAP? (Choose all that apply.)

7

What social-engineering technique involves telling an employee that you're calling from the CEO's office and need certain information ASAP? (Choose all that apply.)

8

Entering a company's restricted area by following closely behind an authorized person is referred to as which of the following?

9

Discovering a user's password by observing the keys he or she presses is called which of the following?

10

Many social engineers begin gathering the information they need by using which of the following?

11

What's the first method a security tester should attempt to find a password for a computer on the network?

12

If you're trying to find newsgroup postings by IT employees of a certain company, which of the following Web sites should you visit?

13

Which of the following is one method of gathering information about the operating systems a company is using?

14

When conducting competitive intelligence, which of the following is a good way to determine the size of a company's IT support staff?

15

To determine a company's primary DNS server, you can look for a DNS server containing which of the following?

16

Which of the following enables you to view all host computers on a network?

17

Which of the following is a good Web site for gathering information on a domain?

18

A cookie can store information about a Web site's visitors.

19

What's one way to gather information about a domain?

20

________ is one of the components most vulnerable to network attacks.

21

Which of the following contains host records for a domain?

22

Which of the following is a tool for creating a custom TCP/IP packet and sending it to a host computer?

23

Which of the following is a fast and easy way to gather information about a company? (Choose all that apply.)

24

Fping doesn't allow pinging multiple IP addresses simultaneously.

25

To bypass some ICMP-filtering devices on a network, an attacker might send which type of packets to scan the network for vulnerable services? (Choose all that apply.)

26

In basic network scanning, ICMP Echo Requests (type 8) are sent to host computers from the attacker, who waits for which type of packet to confirm that the host computer is live?