Which NMAP feature can a tester implement or adjust while scanning for open ports to avoid
detection by the network’s IDS?

When referring to the Domain Name Service, what is denoted by a ‘zone’?

Windows file servers commonly hold sensitive files, databases, passwords and more. Which of

the following choices would be a common vulnerability that usually exposes them?

Statistics from cert.org and other leading security organizations has clearly showed a steady rise
in the number of hacking incidents perpetrated against companies.
What do you think is the main reason behind the significant increase in hacking attempts over the
past years?

Which type of access control is used on a router or firewall to limit network activity?

While examining a log report you find out that an intrusion has been attempted by a machine
whose IP address is displayed as 0xde.0xad.0xbe.0xef. It looks to you like a hexadecimal number.
You perform a ping 0xde.0xad.0xbe.0xef. Which of the following IP addresses will respond to the
ping and hence will likely be responsible for the intrusion?

You are doing IP spoofing while you scan your target. You find that the target has port 23 open.
Anyway you are unable to connect. Why?

Which NMAP command combination would let a tester scan every TCP port from a class C
network that is blocking ICMP with fingerprinting and service detection?

All the web servers in the DMZ respond to ACK scan on port 80. Why is this happening ?

Which types of detection methods are employed by Network Intrusion Detection Systems (NIDS)?

(Choose two.)