Which of the following identifies the three modes in which Snort can be configured to run?

A tester has been hired to do a web application security test. The tester notices that the site is dynamic and
must make use of a back end database.
In order for the tester to see if SQL injection is possible, what is the first character that the tester should use to
attempt breaking a valid SQL request?

Which tool is used to automate SQL injections and exploit a database by forcing a given web application to
connect to another database controlled by a hacker?

Which of the following is a client-server tool utilized to evade firewall inspection?

What is the outcome of the comm”nc -l -p 2222 | nc 10.1.0.43 1234″?

A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using
Metasploit?

Which protocol and port number might be needed in order to send log messages to a log analysis tool that
resides behind a firewall?

Which of the following items of a computer system will an anti-virus program scan for viruses?

How can a rootkit bypass Windows 7 operating system’s kernel mode, code signing policy?

What is the best defense against privilege escalation vulnerability?