Mile2 Mile2 Certifications MK0-201 Questions & Answers

• Question 41:

  Joshua, a specialist in Penetration Testing,has been hired by TestKing.com to perform a security test on some of their servers.Joshua has been challenged to remain undetected by TestKing.com internal security team.

  Over the past few days Joshua has been collecting tons of information about his target.He did so by accessing public database and never sending any packets to his target.How would you call this type of information gathering?

  A. Active Information Gathering

  B. Passive Information Gathering

  C. Stealth Information Gathering

  D. Secret Information Gathering

  Correct Answer: B

• Question 42:

  Bob has accessed a nice site that sells high end wireless network equipment.

  However,after looking around for a while it was obvious that most items were too expensive for his low income salary.

  After fidding around for a while,he identified that modifying some of the page variables would allow him to modify the price easily and then he could save the page locally and resubmit the page in order to get a significant rebate.What weakness within the page code did he use to perform his attack?

  A. HTML code

  B. Hidden From Field code

  C. Java Code

  D. ActiveX

  Correct Answer: B

• Question 43:

  BASIC authentication for HTTP authentication is universally understood but has the disadvantage of passing username and password in BASE64 encoding.What technology could be used to encrypt the BASE64 encoding and thus secure BASIC authentication for all web browsers and all Internet users? Choose the best answer.

  A. SSH

  B. IPsec

  C. SSL

  D. IKE

  Correct Answer: C

• Question 44:

  Julius has been hired to perform a test on TestKing.com networks.

  Julius knows that TestKing.com has a large team of security administrators who are very proactive in their security approach. Most likely there are some Intrusion Detection Systems (IDS) in place that would quickly identify Julius IP

  address and he would then be blocked from accessing the network he is supposed to test.

  How can Julius avoid having his IP address identified and then blocked?

  Which of the following would be the most practical solution and the easiest to implement?

  A. By using public key encryption;it is well known that IDS cannot make any sense of encrypted traffic and they would not be able to determine the source of the probes

  B. By using Secure Socket Layer (SSL) Which will shield the intruder from the IDS and they wont be able to determine the source of the probes

  C. By using only computers within the local internet caf.All traffic will be traced to the internet caf instead of being traced to the security tester

  D. By using an internet anonymizer instead of connecting directly to the target.The anonymizer will shield the real source of the probes.

  Correct Answer: D

• Question 45:

  Password attack fall within two main categories:Social Attacks and Digital Attacks. Which of the following would not be considered a Social Attack on passwords?

  A. Social Engineering

  B. Shoulder Surfing

  C. Dumpster Diving

  D. Dictionary Attack

  Correct Answer: D

• Question 46:

  John is attempting to reduce the likelihood that his Linux server could be compromised through exploitation of ports and services that are not necessary or through the use of packets that might be out of state,modified,or malicious.His first step will be to configure the built in firewall that exists on the recent Linux version. What is the name of the user space program used to configure this firewall?

  A. IPChains

  B. IPwall

  C. IPTables

  D. IPFW

  Correct Answer: C

• Question 47:

  A Denial of Service (DoS) attack can have severe effect on a company network or systems.What is the main purpose of a DoS attack?Choose the best response.

  A. To compromise a remote system

  B. To disallow access from legitimate users

  C. To disallow access from illegitimate users

  D. To create a lot of log entries

  Correct Answer: B

• Question 48:

  Which of the following pieces of information can be obtained from a Whois query?Choose all that apply.

  A. Technical point of contact

  B. Authoritative DNS servers

  C. Private IP Address block

  D. Public IP address block

  Correct Answer: ABD

• Question 49:

  Why is it often recommended to rename the built-in Administrator account on a Windows 2000 domain? Choose the best answer.

  A. Renaming the Guest account is of little value

  B. If you dont rename the Administrator account you will have NetBIOS name conflicts with the Administrator account from other domains in the forest

  C. Account lockout will not stop password guessing attacks via SMB filesharing or BASIC web authentication against the built-in Administrator account

  D. The default domain policy actually requires the Administrator account to be renamed

  Correct Answer: C

• Question 50:

  While performing a penetration test you discover that the system being tested is already compromised by an intruder.Further examination shows the intruder being currently on the system and doing his deeds.As a Certified Penetration Testing Specialist What should you do?

  A. Retaliate immediately and attempt to break into the attacker system before you loose track of where he is doing the attack from.

  B. Suspend your test immediately and advise your client.Once the client gives you authorization you would resume your testing.

  C. Immediately attempt to gather as much information as possible about the intruder,monitor his moves very closely but never attempt to break into this system or retaliate.

  D. Call 911 immediately and then call management to notify them of your promptaction.Once management gives you authorization you can resume your testing.

  Correct Answer: B