GAQM GAQM Certifications CEH-001 Questions & Answers

• Question 131:

  Bryan notices the error on the web page and asks Liza to enter liza' or '1'='1 in the email field. They are greeted with a message "Your login information has been mailed to [email protected]". What do you think has occurred?

  A. The web application picked up a record at random

  B. The web application returned the first record it found

  C. The server error has caused the application to malfunction

  D. The web application emailed the administrator about the error

  Correct Answer: B

• Question 132:

  Liza has forgotten her password to an online bookstore. The web application asks her to key in her email so that they can send her the password. Liza enters her email [email protected]'. The application displays server error. What is wrong with the web application?

  A. The email is not valid

  B. User input is not sanitized

  C. The web server may be down

  D. The ISP connection is not reliable

  Correct Answer: B

• Question 133:

  Kevin has been asked to write a short program to gather user input for a web application. He likes to keep his code neat and simple. He chooses to use printf(str) where he should have ideally used printf(?s? str). What attack will his program expose the web application to?

  A. Cross Site Scripting

  B. SQL injection Attack

  C. Format String Attack

  D. Unicode Traversal Attack

  Correct Answer: C

• Question 134:

  Jane has just accessed her preferred e-commerce web site and she has seen an item she would like to buy. Jane considers the price a bit too steep; she looks at the page source code and decides to save the page locally to modify some of the page variables. In the context of web application security, what do you think Jane has changed?

  A. An integer variable

  B. A 'hidden' price value

  C. A 'hidden' form field value

  D. A page cannot be changed locally; it can only be served by a web server

  Correct Answer: C

• Question 135:

  You have just received an assignment for an assessment at a company site. Company's management is concerned about external threat and wants to take appropriate steps to insure security is in place. Anyway the management is also worried about possible threats coming from inside the site, specifically from employees belonging to different Departments. What kind of assessment will you be performing ?

  A. Black box testing

  B. Black hat testing

  C. Gray box testing

  D. Gray hat testing

  E. White box testing

  F. White hat testing

  Correct Answer: C

• Question 136:

  Scanning for services is an easy job for Bob as there are so many tools available from the Internet. In order for him to check the vulnerability of XYZ, he went through a few scanners that are currently available. Here are the scanners that he uses:

  1.

  Axent's NetRecon (http://www.axent.com)

  2.

  SARA, by Advanced Research Organization (http://www-arc.com/sara)

  3.

  VLAD the Scanner, by Razor (http://razor.bindview.com/tools/)

  However, there are many other alternative ways to make sure that the services that have been scanned will be more accurate and detailed for Bob.

  What would be the best method to accurately identify the services running on a victim host?

  A. Using Cheops-ng to identify the devices of XYZ.

  B. Using the manual method of telnet to each of the open ports of XYZ.

  C. Using a vulnerability scanner to try to probe each port to verify or figure out which service is running for XYZ.

  D. Using the default port and OS to make a best guess of what services are running on each port for XYZ.

  Correct Answer: B

• Question 137:

  Jim is having no luck performing a penetration test in XYZ's network. He is running the tests from home and has downloaded every security scanner that he could lay his hands on. Despite knowing the IP range of all the systems, and the exact network configuration, Jim is unable to get any useful results.

  Why is Jim having these problems?

  A. Security scanners are not designed to do testing through a firewall.

  B. Security scanners cannot perform vulnerability linkage.

  C. Security scanners are only as smart as their database and cannot find unpublished vulnerabilities.

  D. All of the above.

  Correct Answer: D

• Question 138:

  Clive has been hired to perform a Black-Box test by one of his clients.

  How much information will Clive obtain from the client before commencing his test?

  A. IP Range, OS, and patches installed.

  B. Only the IP address range.

  C. Nothing but corporate name.

  D. All that is available from the client site.

  Correct Answer: C

• Question 139:

  Bob is a very security conscious computer user. He plans to test a site that is known to have malicious applets, code, and more. Bob always make use of a basic Web Browser to perform such testing. Which of the following web browser can adequately fill this purpose?

  A. Internet Explorer

  B. Mozila

  C. Lynx

  D. Tiger

  Correct Answer: C

• Question 140:

  Which of the following statements best describes the term Vulnerability?

  A. A weakness or error that can lead to a compromise

  B. An agent that has the potential to take advantage of a weakness

  C. An action or event that might prejudice security

  D. The loss potential of a threat.

  Correct Answer: A