Which of the following tools performs comprehensive tests against web servers, including dangerous files and CGIs?
What is the primary drawback to using advanced encryption standard (AES) algorithm with a 256 bit key to share sensitive data?
Which of the following guidelines or standards is associated with the credit card industry?
Which tool allows analysts and pen testers to examine links between data using graphs and link analysis?
If the final set of security controls does not eliminate all risk in a system, what could be done next?
What is one thing a tester can do to ensure that the software is trusted and is not changing or tampering with critical data on the back end of a system it is loaded on?
Which of the following scanning method splits the TCP header into several packets and makes it difficult for packet filters to detect the purpose of the packet?
Let's imagine three companies (A, B and C), all competing in a challenging global environment. Company A and B are working together in developing a product that will generate a major competitive advantage for them. Company A has a secure DNS server while company B has a DNS server vulnerable to spoofing. With a spoofing attack on the DNS server of company B, company C gains access to outgoing e-mails from company B. How do you prevent DNS spoofing?
TESTED 31 Jan 2025
