Mile2 Mile2 Certifications MK0-201 Questions & Answers

• Question 181:

  What are some of the weaknesses that make LAN Manager Hashes much easier to crak by an attacker? (Select all that apply.)

  A. The 14 character paasword is split in two

  B. The password is converted to Uppercase

  C. The hash value is encrypted using MD5

  D. The hash value is encrypted with AES

  Correct Answer: AB

• Question 182:

  An attacker is sending packets with no flag set.This is also known as doing a NULL scan.Usually,operating system networking stacks will respond with a RST packe,however,some operating systems do not conform to this behavior and respond in appropriately. Such behavior could allow for the identification of the remote OS being used.Which of the following would be one of the Operating systems that responds differently?

  A. Solaris

  B. Linux

  C. Windows

  D. HP-UX

  Correct Answer: C

• Question 183:

  What is one way an attacker can use to determine if a database front-end application is vulnerable to SQL injection?

  A. By entering a single star (*)in the username field.

  B. By entering all outgoing TCP connections after browsing the web application.

  C. There is no way to check,they just have to attempt on attack.

  D. By entering a single quota ( ) in the password field.

  Correct Answer: D

• Question 184:

  Which of the following commands would capture all packets going to and from IP address 192.168.1.2 using tcpdump?

  A. tcpdump host 192.168.1.2

  B. tcpdump dest 192.168.1.2

  C. tcpdump any 192.168.1.2/32

  D. tcpdump all 192.168.1.2/24

  Correct Answer: A

• Question 185:

  Why is passive sniffing much harder to detect,if not impossible,compared to active sniffing?Choose the best answer.

  A. Passive sniffing injects fewer packets into the switch

  B. Passive sniffing can be done only via software and not hardware

  C. A device that only receives packets and never transmits packets is truly undetectable.

  D. It is difficult to obtain software that passively sniffs

  Correct Answer: C

• Question 186:

  What sniffer program is capable of reconstructing associated TCP packets into a sessions showing application layer data from the client to the server and vice-versa?Choose the best 2 answers.

  A. Packetyzer

  B. Etherape

  C. Ethereal

  D. ARPwatch

  Correct Answer: AC

• Question 187:

  A Windows computer that has not been hardened properly might allow NULL connection from a remote host.

  Which of the following commands would be used by a remote attacker to attempt connecting using NULL session?

  A. net use \\servername\ipc$NULL/u

  B. net use \\servername\ipc$u:

  C. net share \\servername\ipc$/u:

  D. net use \\servername\ipc$/u:NULL

  Correct Answer: B

• Question 188:

  This technique consists of using social to trick someone into revealing information they should not usually release to unathorized users.

  What do we call this technique or type of attack?

  A. Shoulder Surfing

  B. Eavesdropping

  C. Social Engineering

  D. Social Coining

  Correct Answer: C

• Question 189:

  A null session allows users to connect remotely to other Windows computers on the network.According to the implementation of NULL sessions of Windows platforms,how long would the password be in order to establish a NULL Session?

  A. At least 8 Characters

  B. A passphrase is used not a password

  C. There is no password involved

  D. Windows makes use of Digital Signature in such case,not passwords

  Correct Answer: C

• Question 190:

  What technology can be deployed at the network layer to protect against snififng?Choose the best answer.

  A. SSL

  B. Certificates

  C. IPSec

  D. DAI

  Correct Answer: C