Eccouncil 312-50 Quiz 1 Topic 2 Questions 1-5

Question: 1

In Risk Management, how is the term "likelihood" related to the concept of "threat?"

ALikelihood is the probability that a threat-source will exploit a vulnerability.

BLikelihood is a possible threat-source that may exploit a vulnerability.

CLikelihood is the likely source of a threat that could exploit a vulnerability.

DLikelihood is the probability that a vulnerability is a threat-source.

Show Answer

Question: 2

The "black box testing" methodology enforces which kind of restriction?

AOnly the external operation of a system is accessible to the tester.

BOnly the internal operation of a system is known to the tester.

CThe internal operation of a system is only partly accessible to the tester.

DThe internal operation of a system is completely known to the tester.

Show Answer

Question: 3

What is the most common method to exploit the ''Bash Bug'' or ''ShellShock" vulnerability?

AThrough Web servers utilizing CGI (Common Gateway Interface) to send a malformed environment variable to a vulnerable Web server

BManipulate format strings in text fields

CSSH

DSYN Flood

Show Answer

Question: 4

You're doing an internal security audit and you want to find out what ports are open on all the servers. What is the best way to find out?

AScan servers with Nmap

BPhysically go to each server

CScan servers with MBSA

DTelent to every port on each server

Show Answer

Question: 5

Which of the following is a restriction being enforced in ''white box testing?''

AOnly the internal operation of a system is known to the tester

BThe internal operation of a system is completely known to the tester

CThe internal operation of a system is only partly accessible to the tester

DOnly the external operation of a system is accessible to the tester

Show Answer

Eccouncil 312-50 Quiz:1 Topic:2 Questions:1-5