- (Topic 3)
Harris is attempting to identify the OS running on his target machine. He inspected the initial TTL in the IP header and the related TCP window size and obtained the following results:
TTL: 64 Window Size: 5840
What is the OS running on the target machine?

1. A. Solaris OS
2. B. Windows OS
3. C. Mac OS
4. D. Linux OS

Correct Answer: D

- (Topic 3)
You are logged in as a local admin on a Windows 7 system and you need to launch the Computer Management Console from command line.
Which command would you use?

1. A. c:\compmgmt.msc
2. B. c:\services.msc
3. C. c:\ncpa.cp
4. D. c:\gpedit

Correct Answer: A
To start the Computer Management Console from command line just type compmgmt.msc
/computer:computername in your run box or at the command line and it should automatically open the Computer Management console.
References: http://www.waynezim.com/tag/compmgmtmsc/

- (Topic 3)
What is the following command used for?
sqlmap.py-u ,,http://10.10.1.20/?p=1&forumaction=search" -dbs

1. A. Creating backdoors using SQL injection
2. B. A Enumerating the databases in the DBMS for the URL
3. C. Retrieving SQL statements being executed on the database
4. D. Searching database statements at the IP address given

Correct Answer: B

- (Topic 2)
Morris, a professional hacker, performed a vulnerability scan on a target organization by sniffing the traffic on the network lo identify the active systems, network services, applications, and vulnerabilities. He also obtained the list of the users who are currently accessing the network. What is the type of vulnerability assessment that Morris performed on the target organization?

1. A. internal assessment
2. B. Passive assessment
3. C. External assessment
4. D. Credentialed assessment

Correct Answer: B
Passive Assessment Passive assessments sniff the traffic present on the network to identify the active systems, network services, applications, and vulnerabilities. Passive assessments also provide a list of the users who are currently accessing the network.

- (Topic 3)
Jack, a professional hacker, targets an organization and performs vulnerability scanning on the target web server to identify any possible weaknesses, vulnerabilities, and misconfigurations. In this process, Jack uses an automated tool that eases his work and performs vulnerability scanning to find hosts, services, and other vulnerabilities in the target server. Which of the following tools is used by Jack to perform vulnerability scanning?

1. A. Infoga
2. B. WebCopier Pro
3. C. Netsparker
4. D. NCollector Studio

Correct Answer: A