QUESTION NO: 1
Which of the following command-line utilities is used to show the state of current TCP/IP connections?
Which of the following command-line utilities is used to show the state of current TCP/IP connections?
Correct Answer: C
Vote an answer
QUESTION NO: 2
You work as a Network Administrator for BlueTech Inc. You want to configure Snort as an IDS for your company's wireless network, but you are concerned that Snort does not support all types of traffic. What traffic does Snort support?
Each correct answer represents a complete solution. Choose all that apply.
You work as a Network Administrator for BlueTech Inc. You want to configure Snort as an IDS for your company's wireless network, but you are concerned that Snort does not support all types of traffic. What traffic does Snort support?
Each correct answer represents a complete solution. Choose all that apply.
Correct Answer: A,B,C,D
Vote an answer
QUESTION NO: 3
Passive OS fingerprinting (POSFP) is configured in an organization's network in order to improve the alert output by reporting some information. Which of the following information does it include?
Each correct answer represents a part of the solution. Choose all that apply.
Passive OS fingerprinting (POSFP) is configured in an organization's network in order to improve the alert output by reporting some information. Which of the following information does it include?
Each correct answer represents a part of the solution. Choose all that apply.
Correct Answer: B,C,D
Vote an answer
QUESTION NO: 4
Which of the following devices works as a transparent bridge between the wireless clients and the wired network?
Which of the following devices works as a transparent bridge between the wireless clients and the wired network?
Correct Answer: A
Vote an answer
QUESTION NO: 5
Which of the following steps are generally followed in computer forensic examinations?
Each correct answer represents a complete solution. Choose three.
Which of the following steps are generally followed in computer forensic examinations?
Each correct answer represents a complete solution. Choose three.
Correct Answer: A,B,D
Vote an answer
QUESTION NO: 6
Which of the following statements are true about an IDP rule base notification?
Which of the following statements are true about an IDP rule base notification?
Correct Answer: C
Vote an answer
QUESTION NO: 7
Which of the following steps are generally followed in computer forensic examinations?
Each correct answer represents a complete solution. Choose three.
Which of the following steps are generally followed in computer forensic examinations?
Each correct answer represents a complete solution. Choose three.
Correct Answer: A,B,D
Vote an answer
QUESTION NO: 8
Which of the following actions can be taken as the countermeasures against the ARP spoofing attack?
Each correct answer represents a complete solution. Choose all that apply.
Which of the following actions can be taken as the countermeasures against the ARP spoofing attack?
Each correct answer represents a complete solution. Choose all that apply.
Correct Answer: A,C,D
Vote an answer
QUESTION NO: 9
Which of the following types of Network Address Translation (NAT) uses a pool of public IP addresses?
Which of the following types of Network Address Translation (NAT) uses a pool of public IP addresses?
Correct Answer: A
Vote an answer
QUESTION NO: 10
Which of the following commands will you use with the tcpdump command to capture the traffic from a filter stored in a file?
Which of the following commands will you use with the tcpdump command to capture the traffic from a filter stored in a file?
Correct Answer: C
Vote an answer
QUESTION NO: 11
You run the tcpdump command line utility and get a report produced by tcpdump. What information does this report include?
Each correct answer represents a complete solution. Choose three.
You run the tcpdump command line utility and get a report produced by tcpdump. What information does this report include?
Each correct answer represents a complete solution. Choose three.
Correct Answer: B,C,D
Vote an answer
QUESTION NO: 12
Which of the following is used to provide hook handling facility within the Linux kernel in order to capture and manipulate network packets?
Which of the following is used to provide hook handling facility within the Linux kernel in order to capture and manipulate network packets?
Correct Answer: D
Vote an answer
QUESTION NO: 13
Which of the following hexadecimal values in the boot field in the configuration register loads the first IOS file found in Flash memory?
Which of the following hexadecimal values in the boot field in the configuration register loads the first IOS file found in Flash memory?
Correct Answer: C
Vote an answer
QUESTION NO: 14
Which of the following techniques correlates information found on multiple hard drives?
Which of the following techniques correlates information found on multiple hard drives?
Correct Answer: C
Vote an answer
QUESTION NO: 15
Which of the following firewalls operates at three layers- Layer3, Layer4, and Layer5?
Which of the following firewalls operates at three layers- Layer3, Layer4, and Layer5?
Correct Answer: C
Vote an answer