MA0-150 Exam Questions

A person connects to a web application via a mobile device. What request header name can this application use determine which device the person is using?

What is the proper syntax for enumerating non-hidden shares on a host?

What is the term used for a technique that runs code within the address space of another process by forcing it to bad a library?

What Microsoft utility encrypts the hashed passwords in a SAM database using 128-bit encryption?

An attacker has just compromised a Linux host. What command can be used to determine the distribution of Linux?

What is NOT a possible cross-site request forgery attack vector?

The Xscan tool is a

Executing dig @ns-a.mcafee.com mcafee.com axfr attempts to perform a

What is the proper syntax for creating a NetBIOS "null session"?

When viewing the sshd config file on a Linux/Unix host, the following option is found: PermitRootLogin no What security best practice does this option provide?

After compromising a Linux/Unix host, an attacker cannot seem to ping hosts by name but can ping them by IP address. What command can be used to find the DNS server that the compro...

Meterpreter avoids detection from most anti-virus software by

What is the difference between web server attacks and web application attacks?

Active Directory enumeration can be achieved by targeting which port?

What hidden share exists by default on a Windows Server 2003/2008 installation?

Which of the following is needed to perform a Man-in-the-Middle attack on a switched network?

What does the finger command do?

What bit causes the following permissions to have a potential privilege escalation vulnerability? -rwsr-xr-x 1 root root

Which of the following are alternate data streams? (Choose two)

Which of the following tools allows a user to enter Transact-SQL statements? (Choose two)

Which of the following tools can be used to crack LanMan hashes? (Choose three)

What command line tool can be used to change file and folder permissions on a Windows system?

An attacker needs to compile a local privilege escalation exploit for a compromised host. What tool can be used to accomplish this task?

What is the correct syntax to query under which service a user account is running?

What file indicates and controls where system logs are stored?

As a requirement of cross-site request forgery, the user (victim) must.