Free ML0-320 Exam Dumps Preview

Which of the following scan types would be the least accurate scan considering that may other network conditions could indicate that the port is open even though it might not be open?

If the DS Client software has been installed on Windows 95,Windows 98,and NT 4 comptuers,what setting of the LanMan Authentication level should be applied to counteract LanMan hash sniffing and offline cracking? Choose the best Answer:.

Which of the following password and encyption cracking methods is guaranteed to successfully crack any password or encryption algorithm?

What are some of the weaknesses that make LAN Manager Hashes much easier to crak by an attacker? (Select all that apply.)

Why wouldn't it be surprising to find netcat on a trojaned-computer?Choose three.

Which tool speeds up offline password cracking by precomputing tables of password hashes?Choose the best Answer:.

Most search engine support Advanced Search Operators; as a Penetrtion Tester you must be familiar with some of the larger search engines such as Geogle.There is a wealth of information to be gathered from these public databases.

Which of the following operators would you use if you attempt to find an older copy of a website that might have information which is no longer available on the target website?

Which of the following are reasons why LAN Manager hashes stored in the SAM file are considered relatively easy to crack?Choose two.

Julius has been hired to perform a test on Certkiller .com networks. Julius knows that Certkiller .com has a large team of security administrators who are very proactive in their security approach.
Most likely there are some Intrusion Detection Systems (IDS) in place that would quickly identify Julius IP address and he would then be blocked from accessing the network he is supposed to test.
How can Julius avoid having his IP address identified and then blocked?

Which of the following would be the most practical solution and the easiest to implement?

Bob is doing a penetration test.
He was able to get system level access on one of the servers exploiting one of the known weaknesses of the web server.
Bob attempted to copy the SAM database but it was locked and his operation was not allowed.

How could Bob succeed in getting a copy of the SAM database if it locked while the system is up and running?

On Wireless networks, what is the Service Set Identify used for?

This technique consists of using social to trick someone into revealing information they should not usually release to unathorized users.

What do we call this technique or type of attack?

Having just downloaded a new version of Cain & Abel,you wish to monitor your network for clear text passwords being sent.
Knowing you are currently connected to a switch you will attempt to perform an ARP poisoning attack that will let you look at all the packets and not only packets sent to your own machine.

What would you call this type of sniffing?

Which of the following password implementation is found only in Windows 2000 and newer Windows versions?

Keystroke loggers can be found in which of the following forms?Choose all that apply.

Which of the following SQL scripts will discover the usernames and hashed passwords from a MSSQL server?

Clement is someone who greatly enjoys fishing.
Clement recently visited a web site that is very proactive in its attempt to save marine life.
While on the site he downloaded a disobedience kit where his free CPU cycle can help contribute to the noble cause of saving the rainbow trout from extinction.

Which of the following terms best describes Clementss activity?

Spyware is either hardware or software installed on a computer which gather information about the user for later retrieval by whoever controls the Spyware.
It is installed without the users knowledge.

What are the two ctegories of Spyware that exist? (Choose two from the list below)

What technologies could a company deploy to protect all data passing from an employees home computer to the corporate intranet?Choose two.

What technology has made trojans easy to distribute?Choose the best Answer:.

How does a system administrator prevent Idp.exe and user2sid.exe tools from retrieving domain usernames,SIDs,and other information from a Windows 2000 Domain Controller if no username and password are supplied?Choose two.

Nathalie has just received a message from her boyfriend,Clement,who is telling her about this severe

Popoute virus that none of the virus companies have been able to stop. In the same message Clement is asking her to pass the message along to anyone she can in order to ensure they will protect themselves before infection.After validating with her IT department it becomes obvious that there was no virus named Popoute that ever existed and that resources have been wasted by the large amount of emails that were sent and time wasted.

What would you call such activities?

Which of the following statements would best describe the act of signing a message with a Digital Signature?

After completing your reconnaissance and scanning,which of the following would be the next logical step performed bye the Pen Tester?

Pen testing is another area of security where acronyms and expressions abound.

What does the term rooting refers to?

Which of the following might be used to give false positives when a UDP scan is being performed against a DMZ server running DNS? Choose the best Answer:.

Cracking encryption is often impossible due to time constraints whereby it would take hundreds of years in some cases.
Great advancement has taken place lately regarding the cracking of password based on the time memory trade-off.
Such an attack allows an attacker to crack the password within a very short period of time.
Under the memory trade-off technique,which of the followig would be used to speed the cracking of password?

What is the most secure method of implementing Software Restriction Policies to prevent users from running both unauthorized and undesirable software?Choose the best Answer:.

Bob is working as an Instrusion Detection System administrator for a company called CCCure.
Being a keen analyst he has noted a very large amount of SYN packet being sent to some of his external
IP addresses.
At first it looked like normal daily traffic but somehow it seems that after his internet facing hosts sends a SYN/ACK reply back to the connection request,the final ACK packet is never received from the remote host.

What type of scan does this pattern indicate?

In symmetric cryptosystem,how many keys are needed to communicate securely between 10 different people who all wish to have a key pair to talk to each other?

Looking at the SOA records presented below,for how long will the secondary DNS servers attempt to contact the primary DNS server before a zone be considered dead.

Which of the following actions can often be used as countermeasures to port scans?Choose all that apply.

Which of the following penetration framework is Open Source and offers features that are similar to some of its rival commercial tools?

How would you call a malware that is set to trigger at a specific date,or sometime in the future?

You have collected a series of messages that are all encrypted. You do not have access to the matching plaintext nor do you have any idea of the key and algorithm that were used to encrypt those messages.You will attempt a crypto attack in order to find the key.

How would you call such an attack?

When doing an ACK flag scanning the target host is sent TCP packets with the ACK flag set and the reply is then analyzed.

Which of the following items within the response packets would be used to determine if the port was open on the remote host?(Choose two)

Johnny has just installed a small utility to calculate subnet masks. After installing this utility he was pormpted by his firewall to accept a connection outbound to a server he was not familiar with.
Further exploration has revealed that there was a new port listening forincoming connection on his computer.
It seems that unwanted software was installed when Johnny installed his great subnet calculator.

What type of malware was he a victim of?