GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 91:

  What is the disadvantage of an automated vulnerability assessment tool?

  A. Ineffective
  B. Slow
  C. Prone to false positives
  D. Prone to false negatives
  E. Noisy
  E. Noisy

• Question 92:

  An NMAP scan of a server shows port 69 is open. What risk could this pose?

  A. Unauthenticated access
  B. Weak SSL version
  C. Cleartext login
  D. Web portal data leak
  A. Unauthenticated access

• Question 93:

  A developer for a company is tasked with creating a program that will allow customers to update their billing and shipping information. The billing address field used is limited to 50 characters. What pseudo code would the developer use to avoid a buffer overflow attack on the billing address field?

  A. if (billingAddress = 50) {update field} else exit
  B. if (billingAddress != 50) {update field} else exit
  C. if (billingAddress >= 50) {update field} else exit
  D. if (billingAddress
  D. if (billingAddress

• Question 94:

  If you perform a port scan with a TCP ACK packet, what should an OPEN port return?

  A. RST
  B. No Reply
  C. SYN/ACK
  D. FIN
  A. RST

• Question 95:

  Which type of hacker represents the highest risk to your network?

  A. black hat hackers
  B. grey hat hackers
  C. disgruntled employees
  D. script kiddies
  C. disgruntled employees

• Question 96:

  Jacob is looking through a traffic log that was captured using Wireshark. Jacob has come across what appears to be SYN requests to an internal computer from a spoofed IP address. What is Jacob seeing here?

  A. Jacob is seeing a Smurf attack.
  B. Jacob is seeing a SYN flood.
  C. He is seeing a SYN/ACK attack.
  D. He has found evidence of an ACK flood.
  B. Jacob is seeing a SYN flood.

• Question 97:

  What are two things that are possible when scanning UDP ports? (Choose two.

  A. A reset will be returned
  B. An ICMP message will be returned
  C. The four-way handshake will not be completed
  D. An RFC 1294 message will be returned
  E. Nothing
  B. An ICMP message will be returned
  E. Nothing

• Question 98:

  Eve decides to get her hands dirty and tries out a Denial of Service attack that is relatively new to her. This time she envisages using a different kind of method to attack Brownies Inc. Eve tries to forge the packets and uses the broadcast address. She launches an attack similar to that of fraggle. What is the technique that Eve used in the case above?

  A. Smurf
  B. Bubonic
  C. SYN Flood
  D. Ping of Death
  A. Smurf

• Question 99:

  Which of the following describes a component of Public Key Infrastructure (PKI) where a copy of a private key is stored to provide third-party access and to facilitate recovery operations?

  A. Key registry
  B. Recovery agent
  C. Directory
  D. Key escrow
  D. Key escrow

• Question 100:

  Which of the following is optimized for confidential communications, such as bidirectional voice and video?

  A. RC4
  B. RC5
  C. MD4
  D. MD5
  A. RC4