Bryce, who is a great security professional with a perfect track record,has just been called into his supervisor's office.

His supervisor has the sad task of letting him know that hes the next position being cut in their downsizing effort.Bryce has been known to be a mellow type of person but the version of being unemployed after working for 25 years at the same company is just a bit too much for him.He cannot understand why newer employees with only a few years of experience have not been fired before him and why he is the one that must leave.Bryce tells himself that is employer is going to pay dearly for this and hes planning to use his skills to cause disruption within the company infrastructure.

Which of the following term would best describe the reaction of Bryce?

A. Cracker

B. Disgruntied Employee

C. Ethical Hacker

D. Revenge Master

Which tools are capable of capturing Kerberos domain authentication credentials and then running either dictionary or brute force offline password cracking?Choose two.

A. LC5

B. Cain and Abel

C. Ettercap

D. Kerbsniff and kerbcrack

SQL injection is defined as?

A. The gaining of access to an operating system by injecting code into a system process.

B. The destruction of databases by mailicious code.

C. The destruction of databases by malicious code.

D. Altering data on a victims database server to that of a hackers choice.

When doing an ACK flag scanning the target host is sent TCP packets with the ACK flag set and the reply is then analyzed.

Which of the following items within the response packets would be used to determine if the port was open on the remote host?(Choose two)

A. The Time To Live field

B. The source port

C. The destination port

D. The Window field

If an attacker gets Adminsitrative-level access, why cant the entries in the Event log be trusted with certainty?Choose two.

A. Entries in the event log are not digitally signed

B. The attacker may have been able to simply clear the event log,thus erasing evidence of the methods of break-in

C. Tools like Winzapper allow the attacker to selectively delete log entries associated with the initial break-in and subsequent malicious activity

D. Event logs have NTFS permissions of Everyone Full Control and thus can be easily edited.