Hacker Tools, Techniques, Exploits and Incident Handling

Alice wants to prove her identity to Bob. Bob requests her password as proof of identity, which Alice
dutifully provides (possibly after some transformation like a hash function); meanwhile, Eve is
eavesdropping the conversation and keeps the password. After the interchange is over, Eve connects to
Bob posing as Alice; when asked for a proof of identity, Eve sends Alice's password read from the last
session, which Bob accepts.

Which of the following attacks is being used by Eve?

Which of the following statements about Ping of Death attack is true?

John works as a professional Ethical Hacker. He is assigned a project to test the security of www.weare-secure.com. He enters a single quote in the input field of the login page of the We-are-secure Web site and receives the following error message:

Microsoft OLE DB Provider for ODBC Drivers error '0x80040E14'

This error message shows that the We-are-secure Website is vulnerable to __________.

Which of the following malicious software travels across computer networks without the assistance of a user?

Which of the following is the method of hiding data within another media type such as graphic or document?

The Klez worm is a mass-mailing worm that exploits a vulnerability to open an executable attachment even in Microsoft Outlook's preview pane. The Klez worm gathers email addresses from the entries of the
default Windows Address Book (WAB).

Which of the following registry values can be used to identify this worm?

You work as an Incident handler in Mariotrixt.Inc. You have followed the Incident handling process to handle the events and incidents. You identify Denial of Service attack (DOS) from a network linked to your internal enterprise network.

Which of the following phases of the Incident handling process should you follow next to handle this incident?

Adam, a novice web user, is very conscious about the security. He wants to visit the Web site that is known to have malicious applets and code. Adam always makes use of a basic Web Browser to perform such testing.

Which of the following web browsers can adequately fill this purpose?

You are monitoring your network's behavior. You find a sudden increase in traffic on the network. It seems to come in bursts and emanate from one specific machine. You have been able to determine that a user of that machine is unaware of the activity and lacks the computer knowledge required to be responsible for a computer attack.

What attack might this indicate?

In which of the following scanning methods do Windows operating systems send only RST packets irrespective of whether the port is open or closed?