Question 156

Study the snort rule given below and interpret the rule. alert tcp any any --> 192.168.1.0/24 111 (content:"|00 01 86 a5|"; msG. "mountd access";)
  • Question 157

    Shellshock allowed an unauthorized user to gain access to a server. It affected many Internet-facing services, which OS did it not directly affect?
  • Question 158

    What is the purpose of DNS AAAA record?
  • Question 159

    During the process of encryption and decryption, what keys are shared?
  • Question 160

    The following is an entry captured by a network IDS. You are assigned the task of analyzing this entry. You notice the value 0x90, which is the most common NOOP instruction for the Intel processor. You figure that the attacker is attempting a buffer overflow attack.
    You also notice "/bin/sh" in the ASCII part of the output.
    As an analyst what would you conclude about the attack?