John and Hillary works at the same department in the company. John wants to find out Hillary’s
network password so he can take a look at her documents on the file server. He enables
Lophtcrack program to sniffing mode. John sends Hillary an email with a link to Error! Reference
source not found. What information will he be able to gather from this?

Terri works for a security consulting firm that is currently performing a penetration test on First
National Bank in Tokyo. Terri’s duties include bypassing firewalls and switches to gain access to
the network. Terri sends an IP packet to one of the company’s switches with ACK bit and the
source address of her machine set. What is Terri trying to accomplish by sending this IP packet?

Tyler is setting up a wireless network for his business that he runs out of his home. He has
followed all the directions from the ISP as well as the wireless router manual. He does not have
any encryption set and the SSID is being broadcast. On his laptop, he can pick up the wireless
signal for short periods of time, but then the connection drops and the signal goes away.
Eventually the wireless signal shows back up, but drops intermittently. What could be Tyler issue
with his home wireless network?

You have compromised a lower-level administrator account on an Active Directory network of a
small company in Dallas, Texas. You discover Domain Controllers through enumeration. You
connect to one of the Domain Controllers on port 389 using ldp.exe. What are you trying to
accomplish here?

Why is it a good idea to perform a penetration test from the inside?

Refer to the Exhibit

Paulette works for an IT security consulting company that is currently performing an audit for the
firm ACE Unlimited. Paulette’s duties include logging on to all the company’s network equipment to

ensure IOS versions are up-to-date and all the other security settings are as stringent as possible.
Paulette presents the following screenshot to her boss so he can inform the client about necessary
changes need to be made. From the screenshot, what changes should the client company make?
Exhibit:

An “idle” system is also referred to as what?

You are working on a thesis for your doctorate degree in Computer Science. Your thesis is based
on HTML, DHTML, and other web-based languages and how they have evolved over the years.
You navigate to archive.org and view the HTML code of news.com. You then navigate to the
current news.com website and copy over the source code. While searching through the code, you
come across something abnormal:
<img src=http://coolwebsearch.com/ads/pixel.news.com width=1 height=1 border=0>
What have you found?

You have compromised a lower-level administrator account on an Active Directory network of a
small company in Dallas, Texas. You discover Domain Controllers through enumeration. You
connect to one of the Domain Controllers on port 389 using ldp.exe. What are you trying to

accomplish here?

You are trying to locate Microsoft Outlook Web Access Default Portal using Google search on the
Internet. What search string will you use to locate them?