EC-Council Certified Security Analyst (ECSA) v10: ECSAV10

As a normal three-way handshake mechanism system A sends an ACK packet to system B. However,

system A does not send an ACK packet to system B. In this case, client B is waiting for an ACK packet

from client A.

What is the status of client B?

A. "Half-open"

B. "Filtered"

C. "Half-closed"

D. "Full-open"

In the process of hacking a web application, attackers manipulate the HTTP requests to subvert the application authorization schemes by modifying input fields that relate to the user ID, username, access group, cost, file names, file identifiers, etc. They first access the web application using a low privileged account and then escalate privileges to access protected resources. What attack has been carried out?

A. XPath Injection Attack

B. Authorization Attack

C. Authentication Attack

D. Frame Injection Attack

Which of the following are the default ports used by NetBIOS service?

A. 135, 136, 139, 445

B. 134, 135, 136, 137

C. 137, 138, 139, 140

D. 133, 134, 139, 142