Sam, a web developer, was instructed to incorporate a hybrid encryption software program
into a web application to secure email messages. Sam used an encryption software, which
is a free implementation of the OpenPGP standard that uses both symmetric-key
cryptography and asymmetric-key cryptography for improved speed and secure key
exchange. What is the encryption software employed by Sam for securing the email
messages?

When conducting a penetration test, it is crucial to use all means to get all available
information about the target network. One of the ways to do that is by sniffing the network. Which of the following cannot be performed by the passive network sniffing?

What is the following command used for?
net use \targetipc$ "" /u:""

Widespread fraud ac Enron. WorldCom, and Tyco led to the creation of a law that was
designed to improve the accuracy and accountability of corporate disclosures. It covers
accounting firms and third parties that provide financial services to some organizations and
came into effect in 2002. This law is known by what acronym?

An attacker, using a rogue wireless AP, performed an MITM attack and injected an HTML
code to embed a malicious applet in all HTTP connections.
When users accessed any page, the applet ran and exploited many machines. Which one
of the following tools the hacker probably used to inject HTML code?

User A is writing a sensitive email message to user B outside the local network. User A has
chosen to use PKI to secure his message and ensure only user B can read the sensitive
email. At what layer of the OSI layer
does the encryption and decryption of the message take place?

Which tier in the N-tier application architecture is responsible for moving and processing data between the tiers?

An attacker decided to crack the passwords used by industrial control systems. In this
process, he employed a loop strategy to recover these passwords. He used one character
at a time to check whether the first character entered is correct; if so, he continued the loop
for consecutive characters. If not, he terminated the loop. Furthermore, the attacker
checked how much time the device took to finish one complete password authentication
process, through which he deduced how many characters entered are correct.
What is the attack technique employed by the attacker to crack the passwords of the
industrial control systems?