Day 3 Quiz

Question 0

In Microsoft windows what acts as a go intermediary between the hardware and the kernel

Answer 0

The hardware abstraction layer

Question 1

In an operating system what program is always running

Answer 1

The kernel

Question 2

When do Microsoft normally release patches

Answer 2

Second Tuesday of the month

Question 3

Which vulnerability does enum4linux exploit

Answer 3

Null sessions permitted

Question 4

What folder in the Unix file system contains user command binaries

Answer 4

Bin

Question 5

What acts as a broker for TCP/IP connections on a Unix system

Answer 5

Dined

Question 6

What computer security model places object access beyond the control of an individual owner of an object

Answer 6

MAC

Question 7

What type of organisation would typically use DAC

Answer 7

Commercial

Question 8

What type of organisation would typically use MAC

Answer 8

Military

Question 9

Which of the following is not a primitive used in the take grant security model
A : take
B : destroy
C : grant
D : create

Answer 9

B: destroy

Question 10

What does the error ‘Microsoft ole db provider for doc drivers error 80040e14’ suggest

Answer 10

The site is vulnerable to sql injection

Question 11

Cross site scripting allows an attacker to…

Answer 11

Inject client side scripting languages into a web application

Question 12

What is this url an example of?
Www.bum.com/download.php?file=felch.txt

XD
Sql injection
Direct object reference
Csrf

Answer 12

Direct object reference

Question 13

What is nikto

Answer 13

A web app scanner

Question 14

How can sql injection be prevented

Answer 14

User input validation

Question 15

What is a data processor when referencing the 1998 dpa act?

Answer 15

Any person other than an employee of the data controller who processes the data on behalf of the data controller

Question 16

Which section of the computer misuse act covers using a computer to facilitate further crime

Answer 16

Section 2

Question 17

RIPA is?

Answer 17

An act to make provision for and about the interception of communications

Question 18

What does guessing a friends Facebook password without their permission violate?

Answer 18

Computer misuse act 1990 section 1

Question 19

When would aggressive port scanning which may lead to Availibility issues be legal

Answer 19

When this is being conducted as part of a penetration test and is clearly defined in the scope of work

Question 20

Which of the following is not a default Microsoft sql table

Sysobjects
Sysprocesses
Systypes
Syssys

Answer 20

Syssys