Name:
Class:
Date:
Page 1
1. Wget is a *nix system command that can be used to retrieve HTTP, HTTPS, and FTP files over the Internet.
a.
True
b.
False
ANSWER:
True
2. Namedroppers is a tool that can be used to capture Web server information and vulnerabilities in a Web site’s
pages that could allow exploits such as SQL injection and buffer overflows.
a.
True
b.
False
ANSWER:
False
3. Walking is an automated way to discover pages of a Web site by following links.
a.
True
b.
False
ANSWER:
False
4. Network attacks can often begin by gathering information from a company’s Web site.
a.
True
b.
False
ANSWER:
True
5. The HTTP CONNECT method starts a remote application-layer loopback of the request message.
a.
True
b.
False
ANSWER:
False
6. What is the passive process of finding information on a company’s network called?
a.
footprinting
b.
searching
c.
calling
d.
digging
ANSWER:
a
7. Which utility is used to gather IP and domain information?
a.
Whois
b.
Netcat
c.
Metis
d.
Dig
ANSWER:
a
8. Which utility can extract meta-data and documents on a Website to reveal the document creator’s network
login, e-mail
address, IP address, and other important information?
Name:
Class:
Date:
Page 2
a.
Samba
b.
Bugnosis
c.
SamSpade
d.
FOCA
ANSWER:
d
9. Which tool can be used to gather competitive intelligence from Web sites?
a.
Whois
b.
Netcat
c.
Metis
d.
Dig
ANSWER:
c
10. When an individual attempts to discover as much information legally possible about their competition, what
information gathering technique are they performing?
a.
competitive study
b.
packet study
c.
basic information
d.
competitive intelligence
ANSWER:
d
11. What tool can be used to read and write data to ports over a network?
a.
Whois
b.
Netcat
c.
Metis
d.
Dig
ANSWER:
b
12. What utility can be used to intercept detailed information from a company’s Web site?
a.
JavaAttack
b.
Zed Attack Proxy
c.
Trace
d.
WebAnalysis
ANSWER:
b
13. What is the HTTP method that retrieves data by URI?
a.
GET
b.
PUT
c.
CONNECT
d.
HEAD
ANSWER:
a
Name:
Class:
Date:
Page 3
14. Which HTTP method starts a remote Application-layer loopback of the request message?
a.
TRACE
b.
PUT
c.
GET
d.
HEAD
ANSWER:
a
15. What HTTP method is the same as the GET method, but retrieves only the header information of an HTML
document, not the document body?
a.
CONNECT
b.
PUT
c.
POST
d.
HEAD
ANSWER:
d
16. Which HTTP method requests that the entity is stored under the Request-URI?
a.
GET
b.
PUT
c.
POST
d.
HEAD
ANSWER:
b
17. Which HTTP error informs you the server understands the request but refuses to comply?
a.
401 Unauthorized
b.
404 Not Found
c.
403 Forbidden
d.
409 Conflict
ANSWER:
c
18. To see additional parameters that can be used with the Netcat command, what should you type at the
command prompt?
a.
nc -lookup
b.
nc -z
c.
nc -h
d.
nc -up
ANSWER:
c
19. What 1-pixel x 1-pixel image file is referenced in an tag, and usually works with a cookie to collect
information
about the person visiting the Website?
a.
image bug
b.
zone transfer
Name:
Class:
Date:
Page 4
c.
bugnosis detector
d.
Web bug
ANSWER:
d
20. Which process enables you to see all the host computers on a network and basically give you a diagram of
an organization’s network?
a.
Web bugs
b.
footprints
c.
zone transfers
d.
namedroppers
ANSWER:
c
21. What area of a network is a major area of potential vulnerability because of the use of URLs?
a.
DNS
b.
SOA
c.
DHCP
d.
POST
ANSWER:
a
22. Which process utilizes the knowledge of human nature to get information from people to use for executing
an attack on a computer network?
a.
fingerprinting
b.
footprinting
c.
zone transferring
d.
social engineering
ANSWER:
d
23. Which technique can be used to read PINs entered at ATMs or at other areas when a pin code is entered?
a.
shoulder surfing
b.
footprinting
c.
zone transferring
d.
piggybacking
ANSWER:
a
24. What social engineering tactic can be utilized to acquire old notes that may contain written passwords or
other items that document important information?
a.
shoulder-surfing
b.
dumpster diving
c.
piggybacking
d.
desk surfing
ANSWER:
b
25. Which type of social engineering attack attempts to discover personal information through the use of email?
Name:
Class:
Date:
Page 5
a.
email surfing
b.
footprinting
c.
spamming
d.
phishing
ANSWER:
d
26. What tactic is being used when an attacker trailing closely behind an employee enters a restricted area
without any security credentials by utilizing their proximity to another employee with security clearance?
a.
Shoulder surfing
b.
Footprinting
c.
Piggybacking
d.
Dumpster diving
ANSWER:
c
27. When an attacker chooses to combine social engineering with exploiting vulnerabilities carried out by e-
mail, what type of attack is being performed?
a.
spear phishing
b.
email surfing
c.
personal
d.
email phishing
ANSWER:
a
28. What type of general commands allow a security tester to pull information from a Web server using a web
browser?
a.
TFTP
b.
DNS
c.
HTTP
d.
ARP
ANSWER:
c
29. Which HTTP method is used with a proxy that can dynamically switch to a tunnel connection, such as
Secure Socket Layer (SSL)?
a.
HEAD
b.
CONNECT
c.
PUT
d.
GET
ANSWER:
b
30. Which of the following is a text file generated by a Web server and stored on a user’s browser?
a.
index
b.
cookie
c.
server index
Name:
Class:
Date:
attempt to transfer all the records for which the DNS server is responsible. This process, called a zone transfer,
can be done with the Dig command. (For those familiar with the Nslookup command, Dig is now the
d.
web file
ANSWER:
b
31. Explain the process of “footprinting,” and why it is important to a security professional?
ANSWER:
Footprinting is a process of finding information on a company’s network. An important concept is that
footprinting is passive, or non-intrusive; in other words, you aren’t accessing information illegally or gathering
unauthorized information with false credentials. With passive reconnaissance, you are not even engaging with
the remote systems, but rather attempting to glean information about your target from other sources. Active
footprinting, on the other hand, means you are prodding the target network in ways that might seem suspicious
to network defenders. This includes things like port scans, DNS zone transfers, and interacting with a target’s
Web server.
32. List at least five tools available for footprinting.
ANSWER:
The following tools can be used for footprinting: Google groups, Whois, Web Data Extractor, FOCA,
Necrosoft NS Scan, Google search engine, Namedroppers, White Pages, Metis, Dig, Netcat, Wget, Paros, and
Maltego.
33. What is “competitive intelligence”?
ANSWER:
Information gathering, called competitive intelligence, is done on a high level through technology to discover
information about an organization. As a security professional, you should be able to explain to the company
that hired you all the methods competitors may use to gather information. To limit the amount of information a
company makes public, you should have a good understanding of what a competitor would do to discover
confidential information.
34. How can computer criminals use the Whois utility for their purposes?
ANSWER:
The Whois utility is a commonly used tool for gathering IP address and domain information. With just a
company’s Web address, you can discover a tremendous amount of information. Unfortunately, attackers can
also make use of this information. Often companies don’t realize that they’re publishing information on the
Web that computer criminals can use. The Whois utility gives you information on a company’s IP addresses
and any other domains the company might be part of.
35. How can a computer criminal use HTTP methods before running an exploit on a server?
ANSWER:
If you know HTTP methods, you can send a request to a Web server and, from the generated output,
determine what OS the Web server is using. You can also find other information that could be used in an
attack. After you determine which OS version a company is running, you can search for any exploits that
might be used against that network’s systems.
36. What is the purpose of a Web bug, and do they relate to or differ from spyware?
ANSWER:
A Web bug is a 1-pixel x 1-pixel image file referenced in an tag, and it usually works with a cookie. Its
purpose is similar to that of spyware and adware: to get information about the person visiting the Website.
Web bugs are not from the same Web site as the Web page creator. They come from third-party companies
specializing in data collection. Security professionals need to be aware of cookies and Web bugs to keep these
information-gathering tools off company computers.
37. How can DNS be used for footprinting?
ANSWER:
DNS uses name servers to resolve names. After you determine what name server a company is using, you can
Name:
Class:
Date:
41. Request not understood by server
recommended command.) To determine a company’s primary DNS server, you can look for a DNS server
containing a Start of Authority (SOA) record. An SOA record shows for which zones or IP addresses the DNS
server is responsible. After you determine the primary DNS server, you can perform another zone transfer to
see all host computers on the company network. In other words, the zone transfer gives you an organization’s
network diagram. You can use this information to attack other servers or computers that are part of the
network infrastructure.
38. What type of information is usually gathered by social engineering?
ANSWER:
In computer attacks, the information is usually a password to a network or other information an attacker could
use to compromise a network. A salesperson can get personal information about customers, such as income,
hobbies, social life, drinking habits, music preferences, and the like, just by asking the customer the right
questions. Social engineers might also use persuasion tactics, intimidation, coercion, extortion, and even
blackmail to gather the information they need. They are probably the biggest security threat to networks and
the most difficult to protect against.
39. List and explain the five techniques used by social engineers in their attempts to gain information from
unsuspecting people.
ANSWER:
– Urgency: “I need the information now, or the world will come to an end!”
– Quid pro quo: “I can make your life better if you give me the information I need.”
– Status quo: “Everyone else is doing it, so you should, too.”
– Kindness: “It’s easier to catch flies with honey than with vinegar.”
– Position: Convincing an employee that you’re in a position of authority in the company can be a powerful
means of gaining information.
40. Explain why a simple process like “dumpster diving” can be so effective when gathering information
utilizing social engineering?
ANSWER:
Although it’s certainly not a glamorous form of gathering information, you’d be surprised at what you can find
by examining someone’s trash. For example, discarded computer manuals can indicate what OS is being used.
If the discarded manual is for Windows Server 2012, there’s a good chance the new system is a more recent
Windows OS, such as Windows Server 2016. Sometimes network administrators write notes in manuals or
even write down passwords; social engineers can make use of this information. Company calendars with
meeting schedules, employee vacation schedules, and so on can be used to gain access to offices that won’t be
occupied for a specified period. Trash can be worth its weight in gold for the dumpster diver who knows what
to do with it.
Match each item with a statement below.
a.
HTTP 400 Bad Request
b.
HTTP 403 Forbidden
c.
HTTP 404 Not Found
d.
HTTP 405 Method Not Allowed
e.
HTTP 408 Request Timeout
f.
HTTP 500 Internal Server Error
g.
HTTP 502 Bad Gateway
h.
HTTP 503 Service Unavailable
HTTP 504 Gateway Timeout
HTTP 409 Conflict
Name:
Class:
Date:
Page 8
ANSWER:
a
42. Server understands the request but refuses to comply
ANSWER:
b
43. Unable to match request
ANSWER:
c
44. Request not allowed for the resource
ANSWER:
d
45. Request not made by client in allotted time
ANSWER:
e
46. Request couldn’t be fulfilled by the server
ANSWER:
f
47. Server received invalid response from the upstream server
ANSWER:
g
48. Server is unavailable because of maintenance or overload
ANSWER:
h
49. Server didn’t receive a timely response
ANSWER:
i
50. Request couldn’t be completed because of an inconsistency
ANSWER:
j