Ethical Hacking and Countermeasures (CEHv7): 312-50V7

SSL has been seen as the solution to a lot of common security problems. Administrator will often time make use of SSL to encrypt communications from points A to point B. Why do you think this could be a bad idea if there is an Intrusion Detection System deployed to monitor the traffic between point A and B?

A. SSL is redundant if you already have IDS's in place

B. SSL will trigger rules at regular interval and force the administrator to turn them off

C. SSL will slow down the IDS while it is breaking the encryption to see the packet content

D. SSL will blind the content of the packet and Intrusion Detection Systems will not be able to detect them

When utilizing technical assessment methods to assess the security posture of a network, which of the following techniques would be most effective in determining whether end-user security training would be beneficial?

A. Vulnerability scanning

B. Social engineering

C. Application security testing

D. Network sniffing

At a Windows Server command prompt, which command could be used to list the running services?

A. Sc query type= running

B. Sc query \\servername

C. Sc query

D. Sc config