Q51. Which of the following standards is used in wireless local area networks (WLANs)?

Q52. In which layer of the OSI model does a sniffer operate?

Q53. Which of the following layers of TCP/IP model is used to move packets between the Internet Layer interfaces of two different hosts on the same link?

Q54. You are concerned about war driving bringing hackers attention to your wireless network. What is the most basic step you can take to mitigate this risk?

Q55. You want to search Microsoft Outlook Web Access Default Portal using Google search on the
Internet so that you can perform the brute force attack and get unauthorized access. What search string will you use to accomplish the task?

Q56. Which of the following tools is used to verify the network structure packets and confirm that the packets are constructed according to specification?

Q57. In the screen shot below, which selections would you need click in order to intercept and alter all http traffic passing through OWASP ZAP?

Q58. Which of the following can be the countermeasures to prevent NetBIOS NULL session enumeration in Windows 2000 operating systems?
Each correct answer represents a complete solution. Choose all that apply.

Q59. What will the following scapy commands do?

Q60. Which of the following tools is spyware that makes Windows clients send their passwords as clear text?

Q61. You’ve been asked to test a non-transparent proxy lo make sure it is working. After confirming the browser is correctly pointed at the proxy, you try to browse a web site. The browser indicates it is
“loading” but never displays any part the page. Checking the proxy, you see a valid request in the proxy from your browser. Checking the response to the proxy, you see the results displayed in the accompanying screenshot. Which of the following answers is the most likely reason the browser hasn’t displayed the page yet?

Q62. When sniffing wireless frames, the interface mode plays a key role in successfully collecting traffic. Which of the mode or modes are best used for sniffing wireless traffic?

Q63. What concept do Rainbow Tables use to speed up password cracking?

Q64. Which of the following tools is used to verify the network structure packets and confirm that the packets are constructed according to specification?

Q65. As pan or a penetration lest, your team is tasked with discovering vulnerabilities that could be exploited from an inside threat vector. Which of the following activities fall within that scope?

Q66. Which of the following tools can be used as a Linux vulnerability scanner that is capable of identifying operating systems and network services?
Each correct answer represents a complete solution. Choose all that apply.

Q67. You successfully compromise a target system’s web application using blind command injection. The command you injected is ping-n 1 192.168.1.200. Assuming your machine is 192.168.1 200, which of the following would you see?

Q68. Which of the following file transfer programs will automatically convert end-of line characters between different platforms when placed in ASCII Mode?

Q69. Which of the following tools can be used for session splicing attacks?