Bill has successfully executed a buffer overflow against a Windows IIS web server. He has been able to spawn an interactive shell and plans to deface the main web page. He first attempts to use the "Echo" command to simply overwrite index.html and remains unsuccessful. He then attempts to delete the page and achieves no progress. Finally, he tries to overwrite it with another page again in vain. What is the probable cause of Bill's problem?

• A. There is a problem with the shell and he needs to run the attack again.
• B. The HTML file has permissions of ready only.
• C. You cannot use a buffer overflow to deface a web page.
• D. The system is a honeypot.

Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/IP specifications?

• A. SYN flooding
• B. Ping of death
• C. TCP hijacking
• D. Smurf attack

Your boss Tess King is attempting to modify the parameters of a Web-based application in order to alter the SQL statements that are parsed to retrieve data from the database. What would you call such an attack?

• A. SQL Piggybacking attack
• B. SQL Input attack
• C. SQL Select attack
• D. SQL Injection attack

In an attempt to secure his wireless network, Bob implements a VPN to cover the wireless communications. Immediately after the implementation, users begin complaining about how slow the wireless network is. After benchmarking the network's speed. Bob discovers that throughput has dropped by almost half even though the number of users has remained the same. Why does this happen in the VPN over wireless implementation?

• A. The stronger encryption used by the VPN slows down the network.
• B. Using a VPN with wireless doubles the overhead on an access point for all direct client to access point communications.
• C. Using a VPN on wireless automatically enables WEP, which causes additional overhead.
• D. VPNs use larger packets then wireless networks normally do.

This packet was taken from a packet sniffer that monitors a Web server.

This packet was originally 1514 bytes long, but only the first 512 bytes are shown here. This is the standard hexdump representation of a network packet, before being decoded. A hexdump has three columns: the offset of each line, the hexadecimal data, and the ASCII equivalent. This packet contains a 14-byte Ethernet header, a 20-byte IP header, a 20-byte TCP header, an HTTP header ending in two line-feeds (0D 0A 0D 0A) and then the data. By examining the packet identify the name and version of the Web server?

• A. IIS 5.0
• B. Apache 1.2
• C. Linux WServer 2.3
• D. IIS 4.0