Blog

Enacted in 2002, this U.S. law requires every federal agency to implement information security programs, including significant reporting on compliance and accreditation. Which of the following is the best choice for this definition?

Which OSRF application checks to see if a username has been registered in up to 22 different e-mail providers?

What flag or flags are sent in the segment during the second step of the TCP three-way handshake?

Which of the following would be the best example of a deterrent control?

As a pen test team member, you begin searching for IP ranges owned by the target organization and discover their network range. You also read job postings and news articles and visit the organization’s website. Throughout the first week of the test, you also observe when employees come to and leave work, and you rummage through the trash outside the building for useful information. Which type of footprinting are you accomplishing?

Which of the following can migrate the machine’s actual operating system into a virtual machine?

Which of the following best describes an effort to identify systems that are critical for continuation of operation for the organization?

A pen tester is configuring a Windows laptop for a test. In setting up Wireshark, what driver and library are required to allow the NIC to work in promiscuous mode?

Which type of attack is generally conducted as an inside attacker with elevated privileges on the resources?

Which of the following attacks an already-authenticated connection?