After passing her CEH exam, Carol wants to ensure that her network is completely secure. She
implements a DMZ, statefull firewall, NAT, IPSEC, and a packet filtering firewall. Since all security
measures were taken, none of the hosts on her network can reach the Internet. Why is that?

Harold is a web designer who has completed a website for ghttech.net. As part of the maintenance
agreement he signed with the client, Harold is performing research online and seeing how much
exposure the site has received so far. Harold navigates to google.com and types in the following
search.

link:www.ghttech.net
What will this search produce?

On Linux/Unix based Web servers, what privilege should the daemon service be run under?

Jason has set up a honeypot environment by creating a DMZ that has no physical or logical
access to his production network. In this honeypot, he has placed a server running Windows
Active Directory. He has also placed a Web server in the DMZ that services a number of web
pages that offer visitors a chance to download sensitive information by clicking on a button. A
week later, Jason finds in his network logs how an intruder accessed the honeypot and
downloaded sensitive information. Jason uses the logs to try and prosecute the intruder for
stealing sensitive corporate information. Why will this not be viable?

Jessica works as systems administrator for a large electronics firm. She wants to scan her network
quickly to detect live hosts by using ICMP ECHO Requests. What type of scan is Jessica going to
perform?

Harold wants to set up a firewall on his network but is not sure which one would be the most
appropriate. He knows he needs to allow FTP traffic to one of the servers on his network, but he
wants to only allow FTP-PUT. Which firewall would be most appropriate for Harold? needs?

Jonathan is a network administrator who is currently testing the internal security of his network. He
is attempting to hijack a session, using Ettercap, of a user connected to his Web server. Why will
Jonathan not succeed?

What is a good security method to prevent unauthorized users from “tailgating”?

If an attacker’s computer sends an IPID of 31400 to a zombie computer on an open port in IDLE
scanning, what will be the response?

What is the following command trying to accomplish?