Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in the systems, he uses a detection method where the anti-virus executes the malicious codes on a virtual machine to simulate CPU and memory activities. Which type of virus detection method did Chandler use in this context?

A. Heuristic Analysis

B. Code Emulation

C. Integrity checking

D. Scanning

A tester has been using the msadc.pl attack script to execute arbitrary commands on a Windows NT4 web server. While it is effective, the tester finds it tedious to perform extended functions. On further research, the tester come across a perl script that runs the following msadc functions:

Which exploit is indicated by this script?

A. A buffer overflow exploit

B. A chained exploit

C. A SQL injection exploit

D. A denial of service exploit

In Risk Management, how is the term "likelihood" related to the concept of "threat?"

A. Likelihood is the probability that a threat-source will exploit a vulnerability.

B. Likelihood is a possible threat-source that may exploit a vulnerability.

C. Likelihood is the likely source of a threat that could exploit a vulnerability.

D. Likelihood is the probability that a vulnerability is a threat-source.

What are two things that are possible when scanning UDP ports? (Choose two.)

A. A reset will be returned

B. An ICMP message will be returned

C. The four-way handshake will not be completed

D. An RFC 1294 message will be returned

E. Nothing

What is the code written for?

A. Buffer Overflow

B. Encryption

C. Bruteforce

D. Denial-of-service (Dos)