0 [{"id":382040,"quiz_id":"19620","answer_id":null,"answerType_id":"0","created_at":"2018-02-20 01:29:43","updated_at":"2018-02-20 01:37:58","questionName":"After which one of the following system events would malicious code or scripts most likely not be persistent?","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":1,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382038,"quiz_id":"19620","answer_id":null,"answerType_id":"2","created_at":"2018-02-20 01:28:47","updated_at":"2018-02-20 01:37:58","questionName":"Match the application testing type with the characteristics.","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":0,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382049,"quiz_id":"19620","answer_id":null,"answerType_id":"0","created_at":"2018-02-20 01:36:08","updated_at":"2018-02-20 01:37:58","questionName":"What is the alternate term used for piggybacking through a secured door?","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":7,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382032,"quiz_id":"19620","answer_id":null,"answerType_id":"2","created_at":"2018-02-20 01:10:28","updated_at":"2018-02-20 01:37:58","questionName":"Place the steps in the correct order to prepare for a penetration testing session in your accounting department.","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":11,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382045,"quiz_id":"19620","answer_id":null,"answerType_id":"0","created_at":"2018-02-20 01:32:40","updated_at":"2018-02-20 01:37:58","questionName":"Which of the following actions would most likely lead to common security misconfigurations at layer 2 of the OSI model?","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":4,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382033,"quiz_id":"19620","answer_id":null,"answerType_id":"0","created_at":"2018-02-20 01:11:48","updated_at":"2018-02-20 01:37:58","questionName":"With respect to the identification of a lack of security controls in an enterprise, which of the following is false?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":12,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382031,"quiz_id":"19620","answer_id":null,"answerType_id":"0","created_at":"2018-02-20 01:08:37","updated_at":"2018-02-20 01:37:58","questionName":"Which statements are true with respect to the process of passively testing security controls?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":10,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382043,"quiz_id":"19620","answer_id":null,"answerType_id":"0","created_at":"2018-02-20 01:31:15","updated_at":"2018-02-20 01:37:58","questionName":"Which activities are included when performing penetration testing?","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":3,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382048,"quiz_id":"19620","answer_id":null,"answerType_id":"0","created_at":"2018-02-20 01:35:29","updated_at":"2018-02-20 01:37:58","questionName":"Which of the following events best represents a false positive scenario?","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":6,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382046,"quiz_id":"19620","answer_id":null,"answerType_id":"0","created_at":"2018-02-20 01:33:29","updated_at":"2018-02-20 01:37:58","questionName":"Which one of the following is not a popular vulnerability scanning tool?","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":5,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382034,"quiz_id":"19620","answer_id":null,"answerType_id":"0","created_at":"2018-02-20 01:16:15","updated_at":"2018-02-20 01:37:58","questionName":"Which statement concerning the pen testing and vulnerability scanning comparisons is false?","questionTimeSeconds":"0","questionTimeMinutes":"2","questionImagePath":null,"position":13,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382051,"quiz_id":"19620","answer_id":null,"answerType_id":"2","created_at":"2018-02-20 01:37:29","updated_at":"2018-02-20 01:37:58","questionName":"Match the network security testing type with the characteristics.","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":8,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382030,"quiz_id":"19620","answer_id":null,"answerType_id":"0","created_at":"2018-02-20 01:06:51","updated_at":"2018-02-20 01:37:58","questionName":"Which form of exploit allows you to jump from one segment or domain to another in order to deliver a payload?","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":9,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null},{"id":382041,"quiz_id":"19620","answer_id":null,"answerType_id":"0","created_at":"2018-02-20 01:30:34","updated_at":"2018-02-20 01:37:58","questionName":"Which of the following best represents an example of passive reconnaissance?","questionTimeSeconds":"0","questionTimeMinutes":"1","questionImagePath":null,"position":2,"explanation":"","question_score_id":null,"lang":null,"questionAudioPath":null}]

block

After which one of the following system events would malicious code or scripts most likely not be persistent?

Select the correct answer(s).  

(0/0)

---

AV Scan

Network disconnect

Logoff

Reboot

none

Match the application testing type with the characteristics.

Match the text (click and drag)   

(0/0)

Check Order Of Answers

---

Match the text
Limited knowledge of fundamental aspects of the application.
No knowledge of internal working of the application.
Detailed study of complete structure of the code.
Can combine two other testing methods.
Design is not known to the tester.
Tester knows structure, design, and implementation of application.

Click and drag
Gray Box
White Box
White Box
Gray Box
Black Box
Black Box

Check Order of Answers

none

What is the alternate term used for piggybacking through a secured door?

Select the correct answer(s).  

(0/0)

---

Pivoting

Snooping

Hopping

Tailgating

none

Place the steps in the correct order to prepare for a penetration testing session in your accounting department.

Match the text (click and drag)   

(0/0)

Check Order Of Answers

---

Match the text
1.
2.
3.
4.
5.

Click and drag
Explore
Learn
Trial and Error
Enumerate
Adapt

Check Order of Answers

none

Which of the following actions would most likely lead to common security misconfigurations at layer 2 of the OSI model?

Select the correct answer(s).  

(0/0)

---

Setting up port security on an access switch

Designing a VLAN deployment

Choosing an authentication mode on WAP

Routing peer authentication and route filtering

Adding feature licenses to firewalls and IPS sensors

none

With respect to the identification of a lack of security controls in an enterprise, which of the following is false?

Select the correct answer(s).  

(0/0)

---

It can help to gain compliance with HIPAA mandates

It seldom involves comprehensive reporting or deep risk analysis

It is often discovered from the results of vulnerability scanning

It does not have to be the outcome of a qualitative analysis

none

Which statements are true with respect to the process of passively testing security controls?

Select the correct answer(s).  

(0/0)

---

Most firewalls can use packet tracer capabilities

Utilizes Intrusion Prevention as opposed to Intrusion Detection

Comprises scanning and snooping tools to gather information for analysis

Involves running security devices in Monitor Only mode

A more invasive process to daily employee productivity

none

Which activities are included when performing penetration testing?

Select the correct answer(s).  

(0/0)

---

Passive reconnaissance

Escalation of privileges

Packet sniffing

Social engineering

none

Which of the following events best represents a false positive scenario?

Select the correct answer(s).  

(0/0)

---

An IDS does not send an SNMP trap when a legitimate ICMP echo request comes from a security operator at a branch office

A remote access trojan (RAT) is tunneled inside port 80 using instant messenger and no action is performed by the firewall, IPS sensor, or advanced malware protection software

A firewall blocks a packet returning from a web server with illegal TCP flags

An IPS alert and packet drop is triggered when an authorized end-user inputs the wrong complex password 5 times

none

Which one of the following is not a popular vulnerability scanning tool?

Select the correct answer(s).  

(0/0)

---

Nexpose

GFI LanGuard

Rig EK

Nessus

OpenVAS

none

Which statement concerning the pen testing and vulnerability scanning comparisons is false?

Select the correct answer(s).  

(0/0)

---

Pen testing is a more manual activity often taking several days

Vulnerability scanning is rarely automated and can take days to complete

Vulnerability scanning is easier and more focused on looking for unpatched systems

Pen testing is a thorough investigation and ethical attempt to exploit vulnerabilities

none

Match the network security testing type with the characteristics.

Match the text (click and drag)   

(0/0)

Check Order Of Answers

---

Match the text
Packet sniffing
Passive
Active
Social Engineering
Promiscuous
Inline

Click and drag
Intrusive
Non-intrusive
Non-intrusive
Non-intrusive
Non-intrusive
Intrusive

Check Order of Answers

none

Which form of exploit allows you to jump from one segment or domain to another in order to deliver a payload?

Select the correct answer(s).  

(0/0)

---

Parrot Attack

Pilot Attack

Poodle Attack

Pivot Attack

none

Which of the following best represents an example of passive reconnaissance?

Select the correct answer(s).  

(0/0)

---

Port and address scanning

Banner grabbing

Vulnerability scanning

Data mining social networks

Web application scanning