1. What is the focus of a security audit or vulnerability assessment?

2. Firewalking is done to accomplish which of the following?

3. What is not a benefit of hardware keyloggers?

4. What is another word for portals?

5. Jennifer is a junior system administrator for a small firm of 50 employees.  For the last week a few users have been complaining of losing connectivity intermittently with no suspect behavior on their part such as large downloads or intensive processes.  Jennifer runs Wireshark on Monday morning to investigate.  She sees a large amount of ARP broadcasts being sent at a fairly constant rate.  What is Jennifer most likely seeing?

6. You want to establish a network connection between two LANs using the Internet. Which technology would best accomplish that for you?

7. How would you use Netcat to set up a server on a system?

8. A virus does not do which of the following?

9. If a domain controller is not present, what can be used instead?

10. What is Tor used for?

11. Janet receives an email enticing her to click a link.  But when she clicks this link she is taken to a website for her bank, asking her to reset her account info.  However, Janet noticed that the bank is not hers and the website is not for her bank.  What type of attack is this?

12. Bob is attempting to sniff a wired network in his first pen test contract.  He sees only traffic from the segment he is connected to.  What can Bob do to gather all switch traffic?

13. The Wayback Machine is used to do which of the following?

14. A scan of a network client shows that port 23 is open; what protocol is this aligned with?

15. What is the process of investigating a computer system for information relating to a security incident?

16. Which of the following can an attacker use to determine the technology and structure within an organization?

17. What can an error message tell an attacker?

18. SMTP is used to perform which function?

19. Which of the following best describes a web application?

20. 'Based on the diagram, what attack is occurring?

21. HTTP is typically open on which port in a firewall?

22. ADS requires what to be present?

23. Which of the following is a scripting language?

24. Jennifer has been working with sniffing and session-hijacking tools on her company network.  Since she wants to stay white hat—that is, ethical—she has gotten permission to undertake these activities.  What would Jennifer’s activities be categorized as?

25. Which of the following best describes what a hacktivist does?