Mock Exam (225 Questions)

Question 1

Why can remote access VPNs not use Main Mode for IKE Phase-1 if the authentication method is pre-shared key?

Answer 1

Because pre-shared key authentication with Main Mode requires that the peer’s IP is known before the connection is established.

Question 2

What is the blocksize of the DES encryption cipher?

Answer 2

64 bits

Question 3

What is this:
16:23:57.094021 IP 192.168.124.204.137 > 192.168.124.255.137: NBT UDP PACKET(137): QUERY; REQUEST; BROADCAST

Answer 3

A NetBIOS over TCP/IP name service broadcast

Question 4

Which is the least secure encryption cipher of those listed below?

1. DES
2. Triple-DES
3. MD5
4. AES
5. IDEA

Answer 4

DES

Question 5

Which file in a user’s home directory controls the trust relationships for Berkeley R services?

Answer 5

.rhosts

Question 6

Which operating system is most likely to be vulnerable to the TTYPROMPT vulnerability in the telnet service?

Answer 6

Solaris 8

Question 7

Which of the following algorithms could be used to negotiate a shared encryption key?

Answer 7

Diffie-Hellman

Question 8

Why might a tester insert the string "

alert(\"it works\")

" into a web form?

Answer 8

To check for a Cross-Site Scripting vulnerability.

Question 9

Which protocols are associated with PPTP?

Answer 9

TCP port 1723 and IP protocol 47

Question 10

Where are the encrypted passwords stored on a Solaris system?

Answer 10

/etc/shadow

Question 11

Which of the following statements about the rwho protocol is true?

1. rwho clients can query the rwho daemon. The protocol uses ONC/RPC.
2. rwho clients can query the rwho daemon using TCP port 513.
3. The rwho daemon sends regular broadcasts to UDP port 513, and listens to broadcasts from other systems.
4. rwho clients can query the rwho daemon using UDP port 513.
5. The rwho daemon sends regular broadcasts to TCP port 513, and listens to broadcasts from other systems.

Answer 11

The rwho daemon sends regular broadcasts to UDP port 513, and listens to broadcasts from other systems.

Question 12

How would you establish a null session to a windows host from a windows command shell?

Answer 12

NET USE \\hostname\ipc$ "" /u:""

Question 13

If the account lockout threshold is set to 5, how many incorrect password attempts will cause the built in administrator account to be locked out on a Windows 2003 system?

Answer 13

The built in administrator account will never be locked out.

Question 14

What effect would an octal umask of 0027 have on the permissions of new files?

Answer 14

Remove group write access, and remove all permissions for others.

Question 15

What is the name given to the field concerned with the security implications of electronic eminations from communications equipment?

Answer 15

TEMPEST

Question 16

Which of these is not a valid IPv6 address?

1. 2001:0db8:0:0::1428:57ab
2. 2001:0db8:1428:57ab

Answer 16

2001:0db8:1428:57ab