What are the three types of compliance that the Open Source Security Testing Methodology Manual
(OSSTMM) recognizes?

Which Open Web Application Security Project (OWASP) implements a web application full of known
vulnerabilities?

When comparing the testing methodologies of Open Web Application Security Project (OWASP) and Open
Source Security Testing Methodology Manual (OSSTMM) the main difference is

Which NMAP feature can a tester implement or adjust while scanning for open ports to avoid detection by the
network’s IDS?

Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/IP
specifications?

A technician is resolving an issue where a computer is unable to connect to the Internet using a wireless
access point. The computer is able to transfer files locally to other machines, but cannot successfully reach the
Internet. When the technician examines the IP address and default gateway they are both on the
192.168.1.0/24. Which of the following has occurred?

If an e-commerce site was put into a live environment and the programmers failed to remove the secret entry
point that was used during the application development, what is this secret entry point known as?

Which statement best describes a server type under an N-tier architecture?

SOAP services use which technology to format information?

Which security strategy requires using several, varying methods to protect IT systems against attacks?