SANS Hacker Tools, Techniques, Exploits and Incident Handling - SEC504 Exam Questions

QUESTION NO: 1
Victor works as a professional Ethical Hacker for SecureEnet Inc. He has been assigned a job to test an image, in which some secret information is hidden, using Steganography. Victor performs the following techniques to accomplish the task:
1.Smoothening and decreasing contrast by averaging the pixels of the area where significant color transitions occurs.
2.Reducing noise by adjusting color and averaging pixel value.
3.Sharpening, Rotating, Resampling, and Softening the image.
Which of the following Steganography attacks is Victor using?

QUESTION NO: 2
Firekiller 2000 is an example of a __________.

QUESTION NO: 3
Which of the following protocol loggers is used to detect ping sweep?

QUESTION NO: 4
Which of the following techniques does an attacker use to sniff data frames on a local area network and modify the traffic?

QUESTION NO: 5
You work as a Network Administrator in the SecureTech Inc. The SecureTech Inc. is using Linux-based server. Recently, you have updated the password policy of the company in which the server will disable passwords after four trials. What type of attack do you want to stop by enabling this policy?

QUESTION NO: 6
Which of the following applications is an example of a data-sending Trojan?

QUESTION NO: 7
Which of the following nmap command parameters is used for TCP SYN port scanning?

QUESTION NO: 8
Which of the following types of malware can an antivirus application disable and destroy?
Each correct answer represents a complete solution. Choose all that apply.

QUESTION NO: 9
Which of the following Incident handling process phases is responsible for defining rules, collaborating human workforce, creating a back-up plan, and testing the plans for an enterprise?

QUESTION NO: 10
Which of the following is a technique for creating Internet maps?
Each correct answer represents a complete solution. Choose two.