1. Which of the following tools is available for banner grabbing?
A) ID Server B) Netcraft C) Telnet D) Maltego E) All of the above
2. From the following screenshot, which tool is one of the most popular available scanners on the market, and supports both credential and un-credentialed scans?
A) Burp Suite B) Nessus C) Nikto D) OpenVAS
3. ________ provides a comprehensive dictionary of known patterns of attack employed by adversaries to exploit a known weakness with cyber-enabled capabilities.
A) Full Disclosure B) CAPEC C) CERT D) CVE
4. Which of the following is not a Vulnerability Scanning tool?
A) Nessus B) GFI LanGuard C) Qualys Scan D) Wireshark
5. Which of the following methods of password-cracking leverages wordlists, that are expanded with discovered real-world passwords when they are discovered?
A) Calling the owner of the account and posing as a member of the IT department to get them to reveal the password B) Rainbow tables C) Dictionary attack D) Brute force
1. Right Answer: E Explanation: Aircrack-ng is best described as an open-source suite of tools useful for conducting RF communication monitoring and security testing of wireless networks.
2. Right Answer: B Explanation: There are many tools available for banner grabbing. Some of them are: ID Server Netcraft Netcat Telnet Xprobe pof Maltego
3. Right Answer: B Explanation: The screenshot shows a report that is typical of Tenable-s Nessus scanner.
4. Right Answer: D Explanation: CAPEC provides a comprehensive dictionary of known patterns of attack employed by adversaries to exploit a known weakness with cyber-enabled capabilities.
5. Right Answer: B Explanation: Wireshark is the most popular, widely used Network Protocol Analyzer tool across commercial, governmental, non-profit, and educational organizations. It is a free, open source tool available for Windows, Linux, MAC, BSD, Solaris, and other platforms natively.
Leave a comment