Mile2 Mile2 Certifications MK0-201 Questions & Answers

• Question 131:

  Looking at the results of hping2 below,what does the flag=RA portion of the response most likely indicate in this case?

  A. The ports is open and waiting for connections

  B. The port is closed

  C. The port is filtered

  D. There are no ports open on the remote host

  Correct Answer: B

• Question 132:

  A TCP connect Scan which is also called a Vanilla TCP port scan will send a SYN packet to ports sequentially to see which are open.

  Using the Vanilla TCP Port Scan, what would be expected as a response from a port that is open?

  A. FIN

  B. SYN/ACK

  C. RST/ACT

  D. ACK

  Correct Answer: B

• Question 133:

  While doing your testing you discover an MS SQL server within the target range.You attempt to connect to the SA account using the default password which is usually blank.You quickly find out it is not working and the password was changed.Which of the following tools could be used to attempt finding what the new password could be?

  A. sqlexec

  B. sql2.exe

  C. sqlbf

  D. Buildsql

  Correct Answer: C

• Question 134:

  Which of the following is the most effective way to reduce the threat of social engineering?Choose the best answer.

  A. Require employees to sign a computer usage policy

  B. Prevent employees from going to happy hour

  C. Require employees to communicate only face-to-face

  D. Extensive user education on the nature of social engineering

  Correct Answer: D

• Question 135:

  What technologies could a company deploy to protect all data passing from an employees home computer to the corporate intranet?Choose two.

  A. L2TP/IPsec

  B. PPTP/MPPE

  C. WEP

  D. IKE

  Correct Answer: AB

• Question 136:

  Which of the following are reasons why fragment-based port scans are often used by attackers?Choose two.

  A. Simple non-stateful packet filtering devices can sometimes be bypassed

  B. Reassembling fragmented packets is not time or processor intensive

  C. RFC 1121 requires that all routers pass fragmented packets

  D. Firewalls may be configured for high throughput and thus dont reassemble and inspect fragmented packets

  Correct Answer: AD

• Question 137:

  Clement is someone who greatly enjoys fishing.

  Clement recently visited a web site that is very proactive in its attempt to save marine life.

  While on the site he downloaded a disobedience kit where his free CPU cycle can help contribute to the

  noble cause of saving the rainbow trout from extinction.

  Which of the following terms best describes Clementss activity?

  A. Compulsive Fishing

  B. Hacktivism

  C. Green Peace

  D. Crackering

  Correct Answer: B

• Question 138:

  Which of the following password and encyption cracking methods is guaranteed to successfully crack any password or encryption algorithm?

  A. Dictionary

  B. Hybrid

  C. Brute Force

  D. RainbowCrack

  Correct Answer: B

• Question 139:

  After completing your reconnaissance and scanning,which of the following would be the next logical step performed bye the Pen Tester?

  A. Vulnerability Assessment

  B. Enumeration

  C. Privilege Escalation

  D. Clean up

  Correct Answer: B

• Question 140:

  Given the following diagram,what ports shouldbe blocked on the perimeter and internal firewall to best protect the Microsoft SQL databae server from unauthorized inbound connections?

  A. 1433, 1434

  B. 443, 434

  C. 1443,1444

  D. 80,139

  Correct Answer: A