Jonathan is a network administrator who is currently testing the internal security of his network. He
is attempting to hijack a session, using Ettercap, of a user connected to his Web server. Why will
Jonathan not succeed?

What is a good security method to prevent unauthorized users from “tailgating”?

If an attacker’s computer sends an IPID of 31400 to a zombie computer on an open port in IDLE
scanning, what will be the response?

What is the following command trying to accomplish?

What will the following URL produce in an unpatched IIS Web Server?

When setting up a wireless network with multiple access points, why is it important to set each
access point on a different channel?

A packet is sent to a router that does not have the packet destination address in its route table,
how will the packet get to its properA packet is sent to a router that does not have the packet?
destination address in its route table, how will the packet get to its proper destination?

Larry is an IT consultant who works for corporations and government agencies. Larry plans on
shutting down the city’s network using BGP devices and ombies? What type of Penetration
Testing is Larry planning to carry out?

You are a security analyst performing reconnaissance on a company you will be carrying out a
penetration test for. You conduct a search for IT jobs on Dice.com and find the following
information for an open position:
7+ years experience in Windows Server environment
5+ years experience in Exchange 2000/2003 environment
Experience with Cisco Pix Firewall, Linksys 1376 router, Oracle 11i and MYOB v3.4 Accounting
software are required MCSA desired,
MCSE, CEH preferred
No Unix/Linux Experience needed
What is this information posted on the job website considered?

Michael works for Kimball Construction Company as senior security analyst. As part of yearly
security audit, Michael scans his network for vulnerabilities. Using Nmap, Michael conducts XMAS
scan and most of the ports scanned do not give a response. In what state are these ports?