named `nc.` The FTP server's access logs show that the anonymous user account logged in to
the server, uploaded the files, and extracted the contents of the tarball and ran the script
using a function provided by the FTP server's software. The ps command shows that the nc
file is running as process, and the netstat command shows the nc process is listening on a
network port.
What kind of vulnerability must be present to make this remote attack possible?
• A. File system permissions
• B. Privilege escalation
• C. Directory traversal
• D. Brute force login
正確答案: A
他可以上傳 shell 並執行，應該是 ftp 文件權限錯了，所以大家都可以執行不用提權 我還是
覺得是 A
題目:41-(uid:41)
Which of the following programming languages is most susceptible to buffer overflow attacks,
due to its lack of a built-in bounds checking mechanism?
Code:
#include <string.h> int main(){ char buffer[8];
strcpy(buffer, ``11111111111111111111111111111``);} Output: Segmentation fault
• A. C#
• B. Python
• C. Java
• D. C++
正確答案: D
題目:42-(uid:42)
Internet Protocol Security IPsec is actually a suite pf protocols. Each protocol within the suite
provides different functionality. Collective IPsec does everything except.
• A. Protect the payload and the headers
剩余178页未读，继续阅读
