Certified Penetration Testing Specialist (CPTS)

Which of the following would represent a technique to embed data within another file whereby it would be near impossible for anyone using or looking at the file to claim that there might be a message hidden within the media or the existence of some from of message?

Which of the following protocols usually make use of the UDP protocol while querying querying information and the TCP protocol for some other functions?

Looking at the results of hping2 below,what does the flag=RA portion of the response most likely indicate in this case?

Keystroke loggers can be found in which of the following forms?Choose all that apply.

Which of the following statements would be TRUE when referring to Stream cliphers?

To block tunneling remote access trojans like 007Shell,what should you do on your firewall?Choose the best answer.

Which of these methods would be considered examples of active reconnaissance? (Choose three.)

When doing a Half-Open Scan what packet type would be expected as a response if the port being probed is closed?

Ping utilities can be used for basic network connectivity test; the ping command sends out an ICMP Echo
Request packets and the destination host will reply with an ICMP Echo Reply packets if the host is alive.

However,in some cases the host might be alive and responses are not received.

What is the most likely cause of such behavior?

An attacker is sending packets with no flag set.This is also known as doing a NULL scan.Usually,operating system networking stacks will respond with a RST packe,however,some operating systems do not conform to this behavior and respond in appropriately.

Such behavior could allow for the identification of the remote OS being used.Which of the following would be one of the Operating systems that responds differently?