Mile2 Mile2 Certifications MK0-201 Questions & Answers

• Question 31:

  Most search engine support Advanced Search Operators; as a Penetrtion Tester you must be familiar with some of the larger search engines such as Geogle.There is a wealth of information to be gathered from these public databases.Which of the following operators would you use if you attempt to find an older copy of a website that might have information which is no longer available on the target website?

  A. Link:

  B. InCache:

  C. Cache:

  D. Related:

  Correct Answer: C

• Question 32:

  Billybastard.c and pipeupadmin are examples of what type of attack?Choose the best answer.

  A. Denial of service

  B. Privilege escalation

  C. FTP bounce

  D. SQL Injection

  Correct Answer: B

• Question 33:

  What are some of the weaknesses that make LAN Manager Hashes much easier to crack by an attacker? (Select all that apply)

  A. The 14 character password is split in two

  B. The password is converted to Uppercase

  C. The hash value is encrypted using MD5

  D. The hash value is encrypted with AES

  Correct Answer: AB

• Question 34:

  Johny has been trying to defeat a crypto system for some time. He has in his possession a whole

  collection of ciphertext documents that were captured from the network.

  However,he does not know what algorithm or plain text was used to create this ciphertext.

  Through statistical analysis he is attempting to decipher the encrypted text.

  What would you call such an attack?

  A. Known Plaintext attack

  B. Ciphertext Only Attack

  C. Chosen Ciphertext Attack

  D. Chosen Plaintext Attack

  Correct Answer: B

• Question 35:

  What techniques are often used to perform an active-stack fingerprint of an operating system?Choose all that apply.

  A. TCP Window and ACK sampling

  B. TCP sequence number sampling

  C. ICMP Echo integrity

  D. IP Type of Service sampling

  Correct Answer: ABCD

• Question 36:

  Which of the following SQL script will cause the SQL server to cease operations?

  A. NET STOP SQLSERVER

  B. OR 1=1; CLOSE WITHNOWAIT;

  C. NET STOP SQLSERVERAGENT

  D. SHUTDOWN WITH NOWAIT;

  Correct Answer: D

• Question 37:

  The Advanced Encryption Standard (AES) was released to protect sensitive data used by

  A. S.Government organizations. Up to what classification level was AES built for?

  B. Up to Top Secret

  C. Up to Secret

  D. Up to Confidential

  E. Unclassified Information Only

  Correct Answer: D

• Question 38:

  You are the security administrator of TestKing.com Inc.

  You have noticed that one of your users has installed a tool named KerbCrack as well as another tool

  named KerbSniff on his machine withou your authroization.

  The company is making use of active directory to store its users database.

  What would these two tools be used for?

  A. To attempt sniffing passwords off the network and then crack them

  B. To capture Kerberos packets and then attempt a brute force attack

  C. To connect to encrypted peer to peer networks

  D. To administer the Kerberos portion of Active Directory

  Correct Answer: B

• Question 39:

  What is one possible method that hackers can use to sniff SSL connections?Choose the best answer.

  A. Use dsniff

  B. Act as a man in the middle between the client and the webserver and send the client a fake certificate that the user will accept as legitimate

  C. Use SSLSniff to sniff the session key exchange

  D. Use SSL Relay

  Correct Answer: B

• Question 40:

  The process of flooding a local segment with thousands of random MAC addresses can result in some switches behaving like a hub.The goal of the hacker is to accomplish what?Choose the best answer.

  A. Denial of service

  B. ARP cache poisoning

  C. Sniffing in a switched network

  D. SYN flood

  Correct Answer: C