MA0-150 Exam Questions

Why would best practices suggest implementing WPA-Enterprise over WPA-PSK in a corporate environment?

A consultant is hired to perform social engineering for a company known as MegaVal. McAfee MA0-150 Exam To make the new site look legitimate, the consultant creates HTML for a logi...

What syntax is used to perform an Nmap UDP port scan?

In a web application, HIDDEN fields are

HTTP Basic authentication sends usernames and passwords in

DNS forward lookups are used to

What are the default permissions set on an /etc/passwd file?

Executing Is -d mcafee.com while in interactive mode using nslookup would result in an attempted

What does the browser_autopwn module in Metasploit do?

An attacker has compromised a Linux host. What command can be used to determine the uid, gid, and group membership?

The ' find/ -perm +4000 -user root-type f -print command finds all files with the setuid field

Which of the following commands can be used to schedule a job on a remote host at 1:00 PM that will run a file named hack.bat?

Port redirection is useful for

The BASH shell keeps a log of all commands run by the user in

Parameter manipulation can be performed

Buffer overflow protection mechanisms include which of the following? (Choose two)

What condition can be caused by attempting to exploit a stack-based buffer overflow that does not yield arbitrary code execution?

The Nmap command "nmap 192.168.1.1 -oA nmap" will output in XML, greppable, and what other format?

What is the proper syntax for NetBIOS enumeration of available domains and workgroups?

McAfee MA0-150 Exam Which of the following tools can be used to launch a Pass the Hash attack? (Choose two)

A consultant is hired to perform attack and penetration testing against several class B address ranges for a Fortune 500 company. After scanning through the address space, the cons...

A counter-measure that makes it more difficult for attackers to cover their tracks is implementing

Which of the following tools allows users to interactively issue commands on a remote Windows system?

Which of the following SIDs identifies the true administrator?

Pass the hash works in a

What Microsoft tool is designed to detect common security misconfigurations and missing updates from Microsoft operating systems and applications such as MS SQL and IIS?

DNS reverse lookups are used to

An attacker has compromised a Linux/Unix host. What command can be used to help datamine the host?

McAfee MA0-150 Exam When attacking an Internet user, which of the following should be pulled to increase an attacker's chances of picking an appropriate exploit?

Countermeasures to network and host enumeration for MS Windows hosts include which of the following? (Choose three)

Which group of lines in the /etc/passwd contains an indicator of compromise?

Wireless protection based solely on MAC filtering goes against security best practices because

After compromising a Linux/Unix host, an attacker tried to run the ifconfig command but receives the error following message: ifconfig: command not found What is the cause of this...

Omitting SSIDs from management frame beacons results in

An attacker believes that plain text credentials may be exposed in a file that mounts remote shares upon booting the operating system. What file controls mounting items upon boot?

The Nmap syntax nmap -sP -PE would perform a ping sweep using what ICMP type?

What tool can be used as a port scanner?

Which of the following tools can be used to grab password hashes on Windows? (Choose two)

A web application that implements three invalid login attempts is mitigating against McAfee MA0-150 Exam

What type of attack leverages the trust that a user has in a website?

What does the command "xlsclients -display 192.168.1.1:0.0 -/' do?

What is the security best-practice countermeasure to prevent port redirection?

A corporate user has just been hacked and shell code is installed. The attacker is running with NT AUTHORITY/SYSTEM privileges and cannot escalate to any other account. What protec...

A consultant is hired to perform social engineering for a company known as MegaVal. To make the new site look legitimate, the consultant creates HTML for a login page and then uses...

However, the consultant receives the following error message: Which of the following commands would the consultant execute in order to enable xp_cmdshell remotely?

An attacker has compromised a Linux/Unix host and discovers a suspicious file called "password" that has no file extension. What command can be used to determine the filetype?

Below is a packet capture from Wireshark showing 2 equivalent MAC address in the Source field. Box 1 shows "Asustek..." while Box 2 shows "00:1a:92..". -Wireshark can determine the...

The command "grep password *" searches for

The following output is generated from cat /etc/shadow: What hashing algorithm is used to protect the root password?

In computer security, a small piece of code that acts as a payload in which an attacker can control a remote machine is called