You enter the following URL on your Web browser:
http://www.we-are-secure.com/scripts/..%co%af../..%co%af../windows/system32/cmd.exe?/c+dir+c:\
What kind of attack are you performing?

Which of the following tools automates the password guessing in NetBIOS sessions and can also
be used to perform a manual dictionary attack?

RRD Job World wants to upgrade its network. The company decides to implement a TCP/IPbased network. According to the case study, RRD Job World is concerned about security. Which
of the following methods should the on-site employees use to communicate securely with the headquarters?
(Click the Exhibit button on the toolbar to see the case study.)

You work as a security manager in Mariotiss Inc. Your enterprise has been facing network and
software security threats since a few months. You want to renew your current security policies
and management to enhance the safety of your information systems. Which of the following is the
best practice to initiate the renewal process from the lowest level with the least managerial effort?

A chkrootkit is a toolkit that checks whether a rootkit is installed in the Linux operating system or
not. Which of the following tools are contained in chkrootkit?

Which of the following is the correct order of digital investigations Standard Operating Procedure (SOP)?

Alice wants to prove her identity to Bob. Bob requests her password as proof of identity, which
Alice dutifully provides (possibly after some transformation like a hash function); meanwhile, Eve is
eavesdropping the conversation and keeps the password. After the interchange is over, Eve
connects to Bob posing as Alice; when asked for a proof of identity, Eve sends Alice’s password
read from the last session, which Bob accepts. Which of the following attacks is being used by Eve?

According to the Sophos Security Threat Report 2009, which country amongst the following tops in
producing spam (unwanted e-mails)?

Which of the following viruses/worms uses the buffer overflow attack?

Which of the following proxy servers is placed anonymously between the client and remote server
and handles all of the traffic from the client?