Q:1-Amazon Consulting Corporation provides penetration testing and managed security services to companies. Legality and regulatory compliance is one of the important components in conducting a successful security audit.
Before starting a test, one of the agreements both the parties need to sign relates to limitations, constraints, liabilities, code of conduct, and indemnification considerations between the parties.

Which agreement requires a signature from both the parties (the penetration tester and the company)?
Mark one answer:
Non-disclosure agreement
Client fees agreement
Rules of engagement agreement
Confidentiality agreement

Q:6-Network scanning is used to identify the available network resources. Which one of the following is also known as a half-open scan, because a full TCP connection is never completed and it is used to determine which ports are open and listening on a target device?
Mark one answer:
SYN Scan
TCP Connect Scan
XMAS Scan
Null Scan

Q:7-External penetration testing is a traditional approach to penetration testing and is more focused on the servers, infrastructure and the underlying software comprising the target. It involves a comprehensive analysis of publicly available information about the target, such as Web servers, Mail servers, Firewalls, and Routers.

Which of the following types of penetration testing is performed with no prior knowledge of the site?
Mark one answer:
Blue box testing
White box testing
Grey box testing
Black box testing

Q:8-John, the penetration tester in a pen test firm, was asked to find whether NTP services are opened on the target network (10.0.0.7) using Nmap tool.

Which one of the following Nmap commands will he use to find it?
Mark one answer:
nmap -sU –p 389 10.0.0.7
nmap -sU –p 123 10.0.0.7
nmap -sU –p 161 10.0.0.7
nmap -sU –p 135 10.0.0.7

Q:9-Which of the following is NOT related to the Internal Security Assessment penetration testing strategy?
Mark one answer:
Testing to provide a more complete view of site security
Testing focused on the servers, infrastructure, and the underlying software, including the target
Testing including tiers and DMZs within the environment, the corporate network, o partner company connections
Testing performed from a number of network access points representing each logical and physical segment

Q:10-A chipset is a group of integrated circuits that are designed to work together and are usually marketed as a single product.” It is generally the motherboard chips or the chips used on the expansion card. Which one of the following is well supported in most wireless applications?
Mark one answer:
Orinoco chipsets
Prism II chipsets
Atheros Chipset
Cisco chipset