Mile2 Mile2 Certifications MK0-201 Questions & Answers

• Question 111:

  Why is it more difficult to santilize information about a company that has publicly-traded stock? Choose the best answer.

  A. The company wants to promote itself as much as possible

  B. The company must regularyly submit financial information to the Securities and Exchange Commission which is then made public

  C. It is impossible to remove information from search engines databases

  D. The company must hire a security consultant with the expertise to santize the information.

  Correct Answer: B

• Question 112:

  How does a system administrator prevent Idp.exe and user2sid.exe tools from retrieving domain usernames,SIDs,and other information from a Windows 2000 Domain Controller if no username and password are supplied?Choose two.

  A. Add the Everyone group to the Pre-Windows 2000 Compatible Access group

  B. Remove the Everyone group from the Pre-Windows 2000 Compatible Access group

  C. Set RestrictAnonymous registry key to two

  D. Set RestrictAnonymous registry key to zero

  Correct Answer: BC

• Question 113:

  Under the Windows platform,there is something refered to as Null Session.

  Which of the following statements would best describe what a null session consists of?

  A. It is a session where zero bytes of traffic have been transferred

  B. It is a session where erroneous commands are being used showing the lack of knowledge of the user connected.

  C. It is a remote session that is established anonymously to a Windows machine.

  D. It is a anonymous FTP session under the Windows platform

  Correct Answer: C

• Question 114:

  At times a tester will be challenged to craft a packet that needs a special quantity of payload data, a specific starting TTL value,a specific speed at which the packet can be sent,and specific number of outgoing packets,and/or very specific IP protocol. Which of the following tools would be best for use for that specific purpose?

  A. Hping

  B. Hydra

  C. Nmap

  D. Queso

  Correct Answer: A

• Question 115:

  Which of the following is the best security risk that has been experienced within applications over the past few years?

  A. Buffer Overflow

  B. Heap Overflow

  C. String Overflow

  D. Format Bug Overflow

  Correct Answer: A

• Question 116:

  Under the SNMP protocol,what does a trap consist of?Choose the best answer.

  A. It is an early implementation of an Honeypot

  B. It is a backdoor left the developer for quick access

  C. It is an alarm sent by the agent to the manager

  D. Older mechanism that is no longer used by SNMP

  Correct Answer: C

• Question 117:

  What does the union operation perform when attempting to execute an SQL Injection through a web form?

  A. Union Operation permits combining two results

  B. Union Operation permits changing the DB password

  C. Union operation is used to combine two accounts

  D. Union operation is used to combine two tables

  Correct Answer: A

• Question 118:

  There are different types of access control that can be used within a company.Logical security will be directly affected depending on the type that you select.

  Which of the following access control tyeps would be best to assign permissions according to the job an employee has within a company?

  A. Rule Based Access Control

  B. Discretionary Access Control

  C. Role Base Access Control

  D. Task Based Access Control

  Correct Answer: C

• Question 119:

  Which of the following statements would be TRUE when referring to Stream cliphers?

  A. Stream Ciphers encrypt one digit at a time

  B. Stream Ciphers divide the plaintext message into fixed group of bit and then encrpt these group of bits

  C. Stream Ciphers are NOT very commonly used

  D. Stream Ciphers can be implemented only in software

  Correct Answer: A

• Question 120:

  Which of the following password implementation is found only in Windows 2000 and newer Windows versions?

  A. LM

  B. NTLM

  C. NTLMv2

  D. Kerberos

  Correct Answer: D