Mile2 Mile2 Certifications MK0-201 Questions & Answers

• Question 91:

  Pieces of malware code are getting smarter all the time.

  It seems it always finds a way of reinstalling itself on a system after it has been removed.

  If you wish to look for malicious registry entries that could be used to restart such malware on a Windows

  XP computer,which of the following entries would you be looking for? (Choose two from the list below)

  A. HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce

  B. HKLM\Software\Microsoft\windows\CurrentVersion\XP\Startup

  C. HKLM\Software\Microsoft\Windows\CurrentVersion\Run

  D. HKLM\Software\Microsoft\Windows\CurrentVersion\XP\Run

  Correct Answer: AC

• Question 92:

  What technologies could a company deploy to protect all data passing from an employees home computer to the corporate intranet?Choose two.

  A. L2TP/Ipsec

  B. PPTP/MPPE

  C. WEP

  D. IKE

  Correct Answer: AB

• Question 93:

  Wayne,who has a twisted mind,has been watching security mailing lists very closely.Today he has seen a new vulnerability announcement that affects multiple mail servers.Jack wishes to scan the internet for servers that are running one of those vulnerable mail servers.His intent is to do this passively at first by doing DNS queries using the nslookup command.

  What type of resource record is Wayne looking for within the DNS query results?

  A. Only A resource record

  B. Only PTR records

  C. Only MX records

  D. Only CNAME records

  Correct Answer: C

• Question 94:

  Which of the following is a MS Access database SQL injection script?

  A. OR a=a

  B. AND 1=1

  C. OR 1=1

  D. SELECT *FROM*

  Correct Answer: A

• Question 95:

  MS SQL server makes use of Stored Procedures.There is an extended stored procedure called sp_makewebtask that can be used with data being returned from executed queries.What would you use this stored procedure for?

  A. It is used to start a new web server instance

  B. It is used to create and HTML page

  C. It is used to perform an entry within a database

  D. It is used to schedule a job task

  Correct Answer: B

• Question 96:

  Which of the following statements explain why hardware-based keystroke loggers are so dangerous? Choose three.

  A. They are expensive.

  B. They can be installed or removed in seconds.

  C. They are totally transparent to both the operating system and the user applications

  D. Neither system administrator nor users routinely inspect the back of their PCs for suspicious devices

  Correct Answer: BCD

• Question 97:

  Why are SYN port scans not as stealthy as what they originally were several years ago?Choose two.

  A. Many firewall rulesets detect and block SYN scans

  B. IDS systems look for SYN flag packets due to the proliferation of SYN flood-based denial of service attacks

  C. RFC 3502 has redefined the TCP three-way handshake thus changing how SYN flags are used

  D. The Internet backtone routers all block SYN flag packets according to new RFC 3705

  Correct Answer: AB

• Question 98:

  Which of the following actions can often be used as countermeasures to port scans?Choose all that apply.

  A. Block unassigned port traffic

  B. Monitor transport-layer connections (control of TCP,SYN,RST,ACK)

  C. Block ICMP type 3 and 8

  D. Use active network monitoring

  Correct Answer: ABCD

• Question 99:

  Spyware is either hardware or software installed on a computer which gather information about the user

  for later retrieval by whoever controls the Spyware.

  It is installed without the users knowledge

  What are the two ctegories of Spyware that exist? (Choose two from the list below)

  A. Surveillance

  B. Screen capture

  C. Key loggers

  D. Advertising

  Correct Answer: AD

• Question 100:

  How would you call a malware that is set to trigger at a specific date,or sometime in the future?

  A. Virus

  B. Worm

  C. Time Bomb

  D. Clocking

  Correct Answer: C