ASEC Test

By Yong Xiang:

Section A MCQ

Section B 4 structured question.

Read questions . Start them in a new page.
Write legibly.

d
Introduction – Various scanning tools

Passwords and Access control – Default or weak passwords, permissions.
Problem with default / weak passwords, permission controls

Scripts and DLL – Malicious scripts and DLL loading paths.

Buffer overflow – Heap overflow, stack overflow. Effects of the exploit

Proprietary Format and protocols. - Security through obscurity is not good.

Format string exploits – how is it conducted? Effects of the exploit (what can you do with it – countermeasures).

Integer overflow – when does it happen, preventive measures.

SQL injection – conducting the exploit, using meta data, protecting the database credentials.

Web vulnerabilities – error messages, forceful browsing, cross site scripting, data tampering, (http sessions, form data, cookies). May need to know answer what is the attack, based on a scenario.

Information disclosure – passwords stored in text file memory

Know vulnerabilities and countermeasure, be prepared to identify the attack based on a scenario. Distribution of marks for section b
20,25,20,15


Section B – Format String, DLL, Integer overflow, SQL injection, web vulnerabilities, information disclosure.
MCQ may have buffer overflow. MCQ study everything.