What type of attack is shown here?

• A. Bandwidth exhaust Attack
• B. Denial of Service Attack
• C. Distributed Denial of Service Attack
• D. Cluster Service Attack

Buffer X in an Accounting application module for Brownies Inc. can contain 200 characters. The programmer makes an assumption that 200 characters are more than enough. Because there were no proper boundary checks being conducted, Bob decided to insert 400 characters into the 200-character buffer. (Overflows the buffer). Below is the code snippet:

How can you protect/fix the problem of your application as shown above?

• A. Add a separate statement to signify that if we have written less than 200 characters to the buffer, the stack should stop because it cannot hold any more data
• B. Because the counter starts with 0, we would stop when the counter is less than 200
• C. Because the counter starts with 0, we would stop when the counter is more than 200
• D. Add a separate statement to signify that if we have written 200 characters to the buffer, the stack should stop because it cannot hold any more data

What type of session hijacking attack is shown in the exhibit?

• A. Session Fixation Attack
• B. Token sniffing Attack
• C. SQL Injection Attack
• D. Cross-site scripting Attack

Trojan horse attacks pose one of the most serious threats to computer security. The image below shows different ways a Trojan can get into a system. Which are the easiest and most convincing ways to infect a computer?

• A. NetBIOS (File Sharing)
• B. Downloading files, games and screensavers from Internet sites
• C. IRC (Internet Relay Chat)
• D. Legitimate "shrink-wrapped" software packaged by a disgruntled employee

One of the ways to map a targeted network for live hosts is by sending an ICMP ECHO request to the broadcast or the network address. The request would be broadcasted to all hosts on the targeted network. The live hosts will send an ICMP ECHO Reply to the attacker's source IP address.
You send a ping request to the broadcast address 192.168.5.255.

There are 40 computers up and running on the target network. Only 13 hosts send a reply while others do not. Why?

• A. You should send a ping request with this command ping ? 192.168.5.0-255
• B. You cannot ping a broadcast address. The above scenario is wrong.
• C. Linux machines will not generate an answer (ICMP ECHO Reply) to an ICMP ECHO request aimed at the broadcast address or at the network address.
• D. Windows machines will not generate an answer (ICMP ECHO Reply) to an ICMP ECHO request aimed at the broadcast address or at the network address.