This type of scanning is hard to trace because the

This type of scanning is hard to trace because the attacker never establishes a full 3-way handshake
connection and most sites do not create a log of incomplete TCP connections.
QUESTION 12
Lori is a Certified Ethical Hacker as well as a Certified Hacking Forensics Investigator working as an IT
security consultant. Lori has been hired on by Kiley Innovators, a large marketing firm that recently
underwent a string of thefts and corporate espionage incidents. Lori is told that a rival marketing company
came out with an exact duplicate product right before Kiley Innovators was about to release it. The
executive team believes that an employee is leaking information to the rival company. Lori questions all
employees, reviews server logs, and firewall logs; after which she finds nothing. Lori is then given
permission to search through the corporate email system. She searches by email being sent to and sent
from the rival marketing company.
She finds one employee that appears to be sending very large email to this other marketing company, even
though they should have no reason to be communicating with them. Lori tracks down the actual emails sent
and upon opening them, only finds picture files attached to them. These files seem perfectly harmless,
usually containing some kind of joke. Lori decides to use some special software to further examine the
pictures and finds that each one had hidden text that was stored in each picture.
What technique was used by the Kiley Innovators employee to send information to the rival marketing
company?
C
Section: (none)
Explanation
Explanation/Reference:
Explanation:
QUESTION 13
You run nmap port Scan on 10.0.0.5 and attempt to gain banner/server information from services running
on ports 21, 110 and 123.
Here is the output of your scan results:
Which of the following nmap command did you run?

C
Explanation
Explanation/Reference:
Explanation:
QUESTION 14
How do you defend against Privilege Escalation?
A. Use encryption to protect sensitive data
B. Restrict the interactive logon privileges
C. Run services as unprivileged accounts
D. Allow security settings of IE to zero or Low
E. Run users and applications on the least privileges
Correct Answer: ABCE
Section: (none)
Explanation
Explanation/Reference:
Explanation:
QUESTION 15
What does ICMP (type 11, code 0) denote?