info

medical

Bob was recently hired by a medical company after it experienced a major cyber security breach. Many patients are complaining that their personal medical records are fully exposed on the Internet and someone can find them with a simple Google search. Bob’s boss is very worried because of regulations that protect those data. Which of the following regulations is mostly violated?

Leave a Comment / CEHv11 / By

Bob was recently hired by a medical company after it experienced a major cyber security breach. Many patients are complaining that their personal medical records are fully exposed on the Internet and someone can find them with a simple Google search. Bob’s boss is very worried because of regulations that protect those data. Which of the following regulations is mostly violated? Option 1: ISO 2002 Option 2 : HIPPA/PHI Option 3 : PII Option 4 …

Bob was recently hired by a medical company after it experienced a major cyber security breach. Many patients are complaining that their personal medical records are fully exposed on the Internet and someone can find them with a simple Google search. Bob’s boss is very worried because of regulations that protect those data. Which of the following regulations is mostly violated? Read More »

web-server

In order to tailor your during a web-application scan, you decide to determine which web-server version is hosting the application. On using the sV flag with Nmap, you obtain the following response: 80/tcp open http-proxy Apache Server 7.1.6 What information-gathering technique does this best describe?

Leave a Comment / CEHv11 / By

In order to tailor your during a web-application scan, you decide to determine which web-server version is hosting the application. On using the sV flag with Nmap, you obtain the following response: 80/tcp open http-proxy Apache Server 7.1.6 What information-gathering technique does this best describe? Option 1 : Banner grabbing Option 2 : Brute forcing Option 3 : WHOIS lookup Option 4 : Dictionary attack 1. Banner grabbing Banner grabbing is a technique wont to …

In order to tailor your during a web-application scan, you decide to determine which web-server version is hosting the application. On using the sV flag with Nmap, you obtain the following response: 80/tcp open http-proxy Apache Server 7.1.6 What information-gathering technique does this best describe? Read More »

SQL

Ethical hacker Jane Smith is attempting to perform an SQL injection attack. She wants to test the response time of a true or false response and wants to use a second command to determine whether the database will return true or false results for user IDs. Which two SQL injection types would give her the results she is looking for?

Leave a Comment / CEHv11 / By

Ethical hacker Jane Smith is attempting to perform an SQL injection attack. She wants to  test the response time of a true or false response and wants to use a second command to determine whether the database will return true or false results for user IDs. Which two SQL injection types would give her the results she is looking for? Option 1 : Time-based and boolean-based Option 2: Out of band and boolean-based Option 3 …

Ethical hacker Jane Smith is attempting to perform an SQL injection attack. She wants to test the response time of a true or false response and wants to use a second command to determine whether the database will return true or false results for user IDs. Which two SQL injection types would give her the results she is looking for? Read More »

configuration

A newly joined employee, Janet, has been allocated an existing system used by a previous employee. Before issuing the system to Janet, it was assessed by Martin, the administrator. Martin found that there were possibilities of compromise through user directories, registries, and other system parameters. He also identified vulnerabilities such as native configuration tables, incorrect registry or file permissions, and software configuration errors. What is the type of vulnerability assessment performed by Martin?

Leave a Comment / CEHv11 / By

A newly joined employee, Janet, has been allocated an existing system used by a previous employee. Before issuing the system to Janet, it was assessed by Martin, the administrator. Martin found that there were possibilities of compromise through user directories, registries, and other system parameters. He also identified vulnerabilities such as native configuration tables, incorrect registry or file permissions, and software configuration errors. What is the type of vulnerability assessment performed by Martin? Option 1 …

A newly joined employee, Janet, has been allocated an existing system used by a previous employee. Before issuing the system to Janet, it was assessed by Martin, the administrator. Martin found that there were possibilities of compromise through user directories, registries, and other system parameters. He also identified vulnerabilities such as native configuration tables, incorrect registry or file permissions, and software configuration errors. What is the type of vulnerability assessment performed by Martin? Read More »

Priority-Intelligence-needs

Priority Intelligence needs

Leave a Comment / CTIA / By

Priority Intelligence needs PIRs are outlined because the basic parts needed for building a threat intelligence program. PIRs are sometimes approved by the organization’s management. Priority Intelligence needs PIRs provides needs that square measure essential for high-level management for creating strategic, operational, or military science changes within the structure infrastructure to scale back risks. Priority Intelligence needs PIRs facilitate organizations to succeed in their strategic goals by providing dynamic situational awareness concerning the evolving threat …

Priority Intelligence needs Read More »

Securing-the-Crime-Scene

Securing the Crime Scene

Leave a Comment / ECIH / By

Securing Securing the Crime Scene first responders should guarantee the safety of all the people at the crime scene further as defend the integrity of the proof. Once inbound at the location, the first responders should move to the scene of the incident and establish the victim devices, networks, so on and mark a fringe. Some of the best practices to secure the crime scene include: • Follow customary procedures and policies of the legal …

Securing the Crime Scene Read More »

overview-of-digital-evidence

Overview of Digital evidence

Leave a Comment / CTIA / By

Digital evidence Overview of Digital evidence, face many challenges during the investigation of a digital crime, like extracting, preserving, and analyzing the digital proof. Digital evidences play an essential role while investigation cyber-crimes. Digital proof helps incident res-ponders in tracing out the wrongdoer.This section provides a summary of digital proof, styles of digital proof, characteristics of digital proof, roles of digital proof, and kinds of proof. Digital proof Digital proof is outlined as “any info …

Overview of Digital evidence Read More »

Intelligence-Information-and-Data

What is Threat Intelligence, Information & Data ?

1 Comment / CTIA / By

Perhaps the most difficult part of the transition from public to the personal sector for cyber professionals coming out of us intelligence, data, Information community (IC) is one among language. Conversations often turn up in trade settings wherever the primary challenge is making certain that everybody is speaking the constant language. within the IC there are some totally different definitions of intelligence, however, they do not vary a lot of from agency to agency. Career …

What is Threat Intelligence, Information & Data ? Read More »

Types-of-Threat-Intelligence

Types of Threat Intelligence

1 Comment / CTIA / By

Threat Intelligence Types of Threat intelligence is discourse information that describes threats and guides organizations in taking numerous business selections. it’s extracted from an enormous assortment of sources and data. It provides operational insight by looking outside the organization and issue alerts on evolving threats to the organization. For the higher management of knowledge that’s collected from totally different sources, it’s necessary to subdivide threat intelligence into differing types. This subdivision is performed supported the …

Types of Threat Intelligence Read More »