Paulette is the systems administrator for Newton Technologies. Paulette holds certifications in both Microsoft areas as well as security such as the CEH. Paulette is currently performing the yearly security audit for the company’s entire network which includes two branch offices. Paulette travels to one of the branch offices to perform an internal audit at that location. She uses Send ICMP Nasty Garbage (SING) to find all the routers in the network. All network equipment at the home office and branch offices are Cisco equipment. Paulette wants to check for a particular arbitrary administrative access vulnerability known in Cisco equipment when certain HTTP requests are made to those routers. If one of the router’s IP addresses is 172.16.28.110, what HTTP request could Paulette use to see if that router is vulnerable?
A.
Paulette could type in: http://172.16.28.110/level/22/exec/show/config/cr to check if the router is vulnerable
B.
If she typed in: http://172.16.28.110/level/121/exec/show/admin/config, she would be able to see if the router is vulnerable to arbitrary administrative access attacks.
C.
By typing in: http://172.16.28.255/level/99/exec/show/config/cr, Paulette will be able to see if the Cisco router is vulnerable
D.
She needs to navigate to: http://172.16.28.110:2209 to check for its vulnerability.
A