Cain

Front 1

CAIN

Back 1

voip traffic decode tool, packet capture

Front 2

security tokens

Back 2

represents a logical or technical control

Front 3

snort

Back 3

network intrusion detection system - ids

Front 4

static nat

Back 4

one to one mapping

Front 5

SOX - sarbanes oxley act

Back 5

statements verifying the completeness and accuracy of financialreports

Front 6

defense in depth

Back 6

security strategy, several, varying methods to protect IT systems against attacks

Front 7

xp_cmdshell

Back 7

sql 2000 type attack*local system account*

Front 8

C, C++

Back 8

buffer overflow attacks

Front 9

Collision resistance

Back 9

property ensures that a hash function will not produce the same hashed value for two different messages

Front 10

Components of Risk Assessment

Back 10

Technical, Organizational, Physical, Administrative SAFEGUARDS

Front 11

Next step after Risk Assessment

Back 11

Design and implement a remediation plan

Front 12

trusted root that issues certificates

Back 12

CA - certification authority

Front 13

network attacks that takes advantage of weaknesses in the fragment reassembly functionality of the TCP/IP protocol stack

Back 13

teardrop attack

Front 14

Blackberry Attacks

Back 14

BBProxy-blackjackking attack

Front 15

decodes pcf files what program?

Back 15

Cain and Abel

Front 16

Ethereal/Wireshark, TCPDump, and Snort uses the same packet capture utulity? true/false

Back 16

true

Front 17

settings of the built-in Windows firewall command line?

Back 17

Netsh firewall show config

Front 18

three types of authentication

Back 18

Something you: have,know,are

Front 19

three types of compliance that the Open Source Security Testing MethodologyManual (OSSTMM) recognizes

Back 19

Legislative,contractual,standards based

Front 20

trap door

Back 20

secret entry point

Front 21

what is IANA

Back 21

internet assigned numbers authority

Front 22

if SQL injection is possible, what is the first character that the testershould use to attempt breaking a valid SQL request?

Back 22

Single quote

Front 23

international standard that establishes a baseline level of confidence inthe security functionality of IT products by providing a set of requirements for evaluation

Back 23

common criteria

Front 24

server type under an N-tier architecture

Back 24

A group of servers with a unique role

Front 25

what is XSS

Back 25

cross site scripting

Front 26

The session cookies do not have the HttpOnly flag set.

Back 26

to exploit xss vuln.

Front 27

syslog port and protocol?

Back 27

514 udp

Front 28

NMAP switch, which ports have been left open on a network

Back 28

-sO

Front 29

NMAP switch, which IP addresses are currently active on a network

Back 29

-sP

Front 30

security mechanism that optimized for confidential communications, such as bidirectional voiceand video?

Back 30

RC4

Front 31

............ is found in all versions of NTFS

Back 31

Alternate Data Streams (ADS)

Front 32

LM hashes smaller than 8 characters attention to .............

Back 32

AAD3B435B51404EE

Front 33

sniff switched network? how?

Back 33

ARP spoof the default gateway

Front 34

Windows system tool checks integrity of critical files that has been digitally signed by Microsoft?

Back 34

sigverif.exe

Front 35

order

Back 35

Passive information gathering,Network level discovery,Host scanning, Analysis of host scanning.

Front 36

What is PKI

Back 36

Public Key Infrastructure, is a set of roles, policies, and procedures needed to create, manage, distribute, use, store, and revoke digital certificates and manage public-key encryption. invented in 1976 by Whitfield Diffie and Martin Hellman.

Front 37

responsible for domains served within North and South America

Back 37

ARIN-american registry for internet numbers

Front 38

repudiation ne demek? türkçe

Back 38

reddetmek

Front 39

NETBIOS and RPC are part of which layer?

Back 39

SESSION (5TH)

Front 40

IPSEC operates at what layer?

Back 40

NETWORK (3TH)

Front 41

4th layer at OSI?

Back 41

TRANSPORT (HOST TO HOST CONTROL, FLOW CONTROL) TCP, SPX, UDP

Front 42

Stack based and heap based are types of ..........

Back 42

buffer overflow

Front 43

Splint is a source code analyzer that is capable of detecting a _

Back 43

buffer overflow

Front 44

gdb nedir açılımı

Back 44

gnu project debugger

Front 45

libsafeplus nedir?

Back 45

buffer overflow prevention tool

Front 46

ASLR açılımı nedir?

Back 46

Address Space Layout Randomisation

Front 47

memory segment is dynamically allocated

Back 47

heap

Front 48

buffer overflow prevention tool/software

Back 48

defensewall nedir?

Front 49

soa nedir açılım

Back 49

service oriented architecture

Front 50

nx bit açılı nedir

Back 50

non executable bit

Front 51

ollydbg is a 32 bit

Back 51

assembler level debugger

Front 52

machine code sometime refered as....................

Back 52

binary code

Front 53

big endian and little endian systems how significant bytes stored? first!

Back 53

big endian = most significant byte
little endine = least significant byte

Front 54

smb port?

Back 54

137

Front 55

bana LDAP portlarını söyle bakem?

Back 55

389 (ldap) 636 (ldap-ssl)

Front 56

getadmin.exe ne için kullanılıyor?

Back 56

privilage escalation

Front 57

privilage escalation iphone dersem hangi tool?

Back 57

jailbreaking

Front 58

service version detection scanning in nmap

Back 58

-sV

Front 59

WinFingerprint nedir söyle bakalım?

Back 59

NetBIOS enumeration tool

Front 60

nbtstat windowsta kullanılıyor, bunun linuxtaki karşılığı nedir?

Back 60

nmblookup

Front 61

netbios port?

Back 61

139

Front 62

Which command is used to list local NetBIOS names?

Back 62

nbtstat.exe -n

Front 63

fingerprinting VPN firewalls

Back 63

ikescan

Front 64

snmp enumeration tools?

Back 64

snscan, snmputil, solarwinds

Front 65

command displays the NetBIOS sessions table and destination names?

Back 65

nbtstat.exe -s

Front 66

protocol scan in nmap

Back 66

-sO

Front 67

The Zed Attack Proxy (ZAP) i

Back 67

integrated penetration testing tool for finding vulnerabilities in web applications.

Front 68

Which nbstat command is used to display the contents of the NetBIOS name cache, NetBIOS names, and their resolved IP addresses?

Back 68

nbtstat.exe -c

Front 69

Which command is used to retrieve the NetBIOS name table of a remote computer?

Back 69

nbtstat.exe -a {NetBIOS name of target computer}

Front 70

snmp osi katmanı

Back 70

application 7

Front 71

two types of managed objects in an MIB?

Back 71

Scalar objects and tabular objects

Front 72

Which command sends release packets to Windows Internet Name Service (WINS) and starts a refresh via NetBIOS?

Back 72

nbtstat.exe -RR

Front 73

ldapminer

Back 73

is not a graphical tool used to enumerate LDAP?

Front 74

Which command is used to retrieve NetBIOS client and server sessions, listing the remote computers by destination IP address only?

Back 74

nbtstat.exe -S

Front 75

Which command is used to list Windows Internet Name Service (WINS) names via NetBIOS?

Back 75

nbtstat.exe -r

Front 76

LDAP operations indicates that the client is asking to abort a previous request?

Back 76

abandon

Front 77

Which command purges the remote cache name table in NetBIOS?

Back 77

nbtstat.exe -R

Front 78

steganography tools söyle bakalım 5 adet

Back 78

Mp3Stegz
OpenPuff
QuickCrypto
StegParty
Snow

Front 79

wpa da PTK nedir?

Back 79

pairwise transient key (PTK)

Front 80

wpa da PMK nedir?

Back 80

pairwise master key (PMK)

Front 81

PMK olmadan PTK olur mu?

Back 81

olmaz