MA0-150 Exam Questions

The C:\>net use \\192.168.1.1\ipc$ "" /u:"" command attempts to

What are features in a web application that can be leveraged for user enumeration? (Choose three)

An attacker has compromised a Linux/Unix host. What command can the attacker run to determine if anyone else is on the system?

What changes after adding data to a file's alternative data stream?

After compromising a Linux/Unix host, an attacker wants to replace a binary with a malicious binary. What command can be used to find the location of the binary in their path?

The generation of random and crafted application input to identify input-handling issues with protocols and APIs is known as

A corporate laptop that implements Bitlocker was recently stolen from a user at Starbucks. The data on the laptop is protected because Bitlocker implements

What is an example of an advanced payload?

Address Resolution Protocol (ARP) is a protocol used for obtaining a

Which of the following are security issues related to LM hashes? (Choose three)

The BASH shell keeps a log of all commands run by the user in

What is a pre-condition for password dumpers?

Antivirus software alerted a user that a keylogger was just found on the system. The user is puzzled by this because the user was only downloading (and had not yet installed) pirat...

What does the x indicate in the line below? root:x:0:0:root:/root:/bin/bash

Cross-site scripting occurs because

Which TCP port does the VVHOIS command use?

Which organization is a non-profit corporation formed to assume responsibility for the IP address space allocation, protocol parameter assignment, domain name system management, an...

What is the correct command to enumerate NFS shares available on a system?

Canonicalization is the process of

McAfee MA0-150 Exam What database can contain the extended stored procedure xp_cmdshell?

An attacker has managed to read the contents of the /etc/shadow file. The password fields start with the characters $1. This means the passwords have been

What is the proper syntax for NetBIOS enumeration of hosts within a domain or workgroup?

Which of the following security benefits does SNMFV3 add? (Choose three)

What is the proper syntax for enumerating all Domain Controllers in a Domain?

Which of the following is a known attack against WPA2?

the following vendors?

What portion of the line below is the salt? root: $6$GkfJO/H/ $IDOEzD01vh7VyDG5rnnLLMXwZl.cikurrg4wtXjq98Vlcf/PA2D1QsT7 VHSsu46B/od4IJIqENMtc8dSpBEal: 14592:0:99999:7:::

When performing a Zombie scan, which field will Nmap use to determine if a host is a 'good' zombie?

The command dig mcafee.com ns attempts to

What command will tell you what user you are logged in as on Microsoft Windows Server 2003/2008?

The purpose of an Nmap Zombie scan is to find open/closed ports on a target without giving up the

Which protocol is used in the traceroute command in UNIX?

Rainbow tables are tables that

After compromising a Linux/Unix host, an attacker cannot seem to write to disk anywhere due to tight file level ACLs. What directory is a good choice to write to?

The netstat -an command is executed on a Linux/Unix host. What group of lines contains the insecure protocol?

The following output is generated from cat /etc/shadow: root:Ed6mckrOLChF.:10063:0:99999:7::: What hashing algorithm is used to protect the root password?

Which of the following increases difficulty of password cracking? (Choose three)

A hacker wants to install a keylogger on a victim's computer but notices the original executable is detected by the victim's antivirus. A sample of the original executable is: In a...

McAfee MA0-150 Exam What is a bindshell?

Forceful browsing is a technique that tests

Attempting to authenticate to a remote host using SSH results in the following error message: login as: root Server refused our key What causes this error message?

An attacker that is able to hack a web server is able to now read /etc/passwd but not /etc/shadow. What command could the attacker run to identify the issue?

What type of attack leverages the trust that a site has in a user?

After compromising a Linux/Unix host, an attacker would like to know what other users have authenticated to that host. What command can be used to find users that have logged in?

Which of the following causes buffer overflows? (Choose three)

From what type of scan would the Nmap port state "open/filtered" result?

Which of the following commands facilitate the principle of least privilege in Linux/Unix? (Choose two)

Which of the following tools can be used to perform NetBIOS Host Enumeration? (Choose three)

A scanned system has the following ports open: TCP 25, TCP 53, TCP 139, and TCP 445. What operating system is running?

What binary is found with the SUID flag set?