Mile2 Mile2 Certifications MK0-201 Questions & Answers

• Question 121:

  Which of the following enumeration techniques can reveal the true built-in Administrator account even if has been renamed?Choose two.

  A. Banner grabbing

  B. NetBIOS null session

  C. DNS zone transfers

  D. SNMP with default community name

  Correct Answer: BD

• Question 122:

  Which of the following might be used to give false positives when a UDP scan is being performed against a DMZ server running DNS? Choose the best answer.

  A. On the firewall,block ICMP TTL Exceeded

  B. On the firewall,block all incoming UDP

  C. On the firewall,block all TCP SYN packets

  D. On the firewall,block all ICMP Port Unreachable messages

  Correct Answer: D

• Question 123:

  Looking at the graphic presented below,what destination port is highlighted in the Hex dump presented? Extract the information from the Hex dump packet captured below.

  A. 53

  B. 69

  C. 50

  D. 80

  Correct Answer: D

• Question 124:

  What are the possible countermeasures to buffer overflow exploits?Choose all that apply.

  A. Apply patches as soon as patches testing is completed

  B. Learn 0-day exploits from hacker websites

  C. Close the port of service at the firewall if there is no patch yet avilable

  D. Run application and services with the least privilege necessary

  Correct Answer: ABCD

• Question 125:

  When a company wishes to have some asurance that a product is working as per the vendor claim they usually seek certification.One of the most commonly used certification schemes today is called Common Criteria (CC).Which of the following terms describe a product that is to be evaluated under the Common Criteria to see how well the product meets the claims made by the vendor?

  A. Security Target

  B. Target of evaluation

  C. Protection Profile

  D. EAL4

  Correct Answer: B

• Question 126:

  Which of these methods would be considered examples of active reconnaissance? (Choose three.)

  A. Ware dialing

  B. Firewalking

  C. Whois lookup

  D. FTP banner retrieval

  Correct Answer: ABD

• Question 127:

  Which tool speeds up offline password cracking by precomputing tables of password hashes?Choose the best answer.

  A. John the Ripper

  B. Xcrack

  C. Rainbow Crack

  D. Cisilia

  Correct Answer: C

• Question 128:

  Dozens of methodologies exist on the market today.Most of them follow the very high level steps.

  Which of the following would represent the most common and logical approach to penetration testing from the first step being accomplished on the left to the last step being done on the right side of the statement below?

  A. Scanning,Footprinting,Enumeration,Penetration

  B. Footprinting,Enumeration,Scanning,Penetration

  C. Footprinting,Scanning,Enumeration,Penetration

  D. Penetration,Enumeration,Scanning,Footprinting

  Correct Answer: C

• Question 129:

  A malicious hacker has been trying to penetrate TestKing.com from an external network location.He has tried every trick in his bag but still did not succeed.

  From the choice presented below,what type of logical attempt is he most likely to attempt next?

  A. Elevation of privileges

  B. Pilfering of data

  C. Denial of service

  D. Installation of a back door

  Correct Answer: C

• Question 130:

  As you have learned in your Penetration Testing training or field experience,WEP is the encryption that was used with early WLAN implementation.it uses a stream cipher called RC4 to produce a string of bith that will be exclusive OR or XOR with the plain text to form the cliphertext.Which of the following statements represents the rules associated with XOR binary mathematics or comparison? Choose the best answer.

  A. If both bits are different the result will be one,if both bits are the same the result will be a zero.

  B. If both bits are different the result will be zero,if both bits are the same the result will be a one.

  C. Only when both bits have a value of one,will the result be one.

  D. Only when both bits have a value of zero,will the result be one.

  Correct Answer: A