You have initiated an active operating system fingerprinting attempt with nmap
against a target system:
[root@ceh NG]# /usr/local/bin/nmap -sT -O 10.0.0.1
Starting nmap 3.28 ( www.insecure.org/nmap/) at 2003-06-18 19:14 IDT
Interesting ports on 10.0.0.1:
(The 1628 ports scanned but not shown below are in state: closed)
Port State Service
21/tcp filtered ftp
22/tcp filtered ssh
25/tcp open smtp
80/tcp open http
135/tcp open loc-srv
139/tcp open netbios-ssn
389/tcp open LDAP
443/tcp open https
465/tcp open smtps
1029/tcp open ms-lsa
1433/tcp open ms-sql-s
2301/tcp open compaqdiag
5555/tcp open freeciv
5800/tcp open vnc-http
5900/tcp open vnc
6000/tcp filtered X11
Remote operating system guess: Windows XP, Windows 2000, NT4 or 95/98/98SE
Nmap run completed - 1 IP address (1 host up) scanned in 3.334 seconds
Using its fingerprinting tests nmap is unable to distinguish between different groups
of Microsoft based operating systems - Windows XP, Windows 2000, NT4 or 95/98/98SE.
What operating system is the target host running based on the open ports shown
above?

The programmers on your team are analyzing the free, open source software being
used to run FTP services on a server. They notice that there is an excessive number
of fgets() and gets() on the source code. These C++ functions do not check bounds.
What kind of attack is this program susceptible to?

Which of the following is the best way an attacker can passively learn about
technologies used in an organization?

Which definition below best describes a covert channel?

If a token and 4-digit personal identification number (PIN) are used to access a
computer system and the token performs off-line checking for the correct PIN, what
type of attack is possible?

Peter extracts the SID list from Windows 2008 Server machine using the hacking tool
"SIDExtracter". Here is the output of the SIDs:
From the above list identify the user account with System Administrator privileges?

When Nmap performs a ping sweep, which of the following sets of requests does it
send to the target device?

Bob is acknowledged as a hacker of repute and is popular among visitors of
“underground” sites. Bob is willing to share his knowledge with those who are
willing to learn, and many have expressed their interest in learning from him.
However, this knowledge has a risk associated with it, as it can be used for
malevolent attacks as well.
In this context, what would be the most affective method to bridge the knowledge
gap between the “black” hats or crackers and the “white” hats or computer security
professionals? (Choose the test answer)