Bill has successfully executed a buffer overflow against a Windows IIS web server. He has been
able to spawn an interactive shell and plans to deface the main web page. He first attempts to use
the “Echo” command to simply overwrite index.html and remains unsuccessful. He then attempts
to delete the page and achieves no progress. Finally, he tries to overwrite it with another page
again in vain.

What is the probable cause of Bill’s problem?

Snort is an open source Intrusion Detection system. However, it can also be used for a few other
purposes as well.
Which of the choices below indicate the other features offered by Snort?

When referring to the Domain Name Service, what is denoted by a ‘zone’?

Statistics from cert.org and other leading security organizations has clearly showed a steady rise
in the number of hacking incidents perpetrated against companies.
What do you think is the main reason behind the significant increase in hacking attempts over the
past years?

You are doing IP spoofing while you scan your target. You find that the target has port 23 open.
Anyway you are unable to connect. Why?

While examining a log report you find out that an intrusion has been attempted by a machine
whose IP address is displayed as 0xde.0xad.0xbe.0xef. It looks to you like a hexadecimal number.
You perform a ping 0xde.0xad.0xbe.0xef. Which of the following IP addresses will respond to the
ping and hence will likely be responsible for the intrusion?

All the web servers in the DMZ respond to ACK scan on port 80. Why is this happening ?

What is a sheepdip?

If you come across a sheepdip machine at your client’s site, what should you do?

If you come across a sheepdip machaine at your client site, what would you infer?