PDF SEC504 Study Guide

Hacker Tools, Techniques, Exploits and Incident Handling Questions and Answers

Question 9

Which of the following statements about smurf is true?

It is a UDP attack that involves spoofing and flooding.

It is an ICMP attack that involves spoofing and flooding.

It is an attack with IP fragments that cannot be reassembled.

It is a denial of service (DoS) attack that leaves TCP ports open.

Question 10

You want to use PGP files for steganography. Which of the following tools will you use to accomplish the task?

Blindside

Snow

ImageHide

Stealth

Question 11

Which of the following steps of incident response is steady in nature?

Containment

Eradication

Preparation

Recovery

Question 12

Which of the following types of scan does not open a full TCP connection?

FIN scan

ACK scan

Stealth scan

Idle scan