GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 151:

  E-mail scams and mail fraud are regulated by which of the following?

  A. 18 U.S.C. par. 1030 Fraud and Related activity in connection with Computers
  B. 18 U.S.C. par. 1029 Fraud and Related activity in connection with Access Devices
  C. 18 U.S.C. par. 1362 Communication Lines, Stations, or Systems
  D. 18 U.S.C. par. 2510 Wire and Electronic Communications Interception and Interception of Oral Communication
  A. 18 U.S.C. par. 1030 Fraud and Related activity in connection with Computers

• Question 152:

  How many bits encryption does SHA-1 use?

  A. 64 bits
  B. 128 bits
  C. 256 bits
  D. 160 bits
  D. 160 bits

• Question 153:

  Study the snort rule given below and interpret the rule.

  alert tcp any any --> 192.168.1.0/24 111 (content:"|00 01 86 a5|"; msG. "mountd access";)

  A. An alert is generated when a TCP packet is generated from any IP on the 192.168.1.0 subnet and destined to any IP on port 111
  B. An alert is generated when any packet other than a TCP packet is seen on the network and destined for the 192.168.1.0 subnet
  C. An alert is generated when a TCP packet is originated from port 111 of any IP address to the 192.168.1.0 subnet
  D. An alert is generated when a TCP packet originating from any IP address is seen on the network and destined for any IP address on the 192.168.1.0 subnet on port 111
  D. An alert is generated when a TCP packet originating from any IP address is seen on the network and destined for any IP address on the 192.168.1.0 subnet on port 111

• Question 154:

  Rebecca has noted multiple entries in her logs about users attempting to connect on ports that are either not opened or ports that are not for public usage. How can she restrict this type of abuse by limiting access to only specific IP addresses that are trusted by using one of the built-in Linux Operating System tools?

  A. Ensure all files have at least a 755 or more restrictive permissions.
  B. Configure rules using ipchains.
  C. Configure and enable portsentry on his server.
  D. Install an intrusion detection system on her computer such as Snort.
  B. Configure rules using ipchains.

• Question 155:

  You are gathering competitive intelligence on XYZ.com. You notice that they have jobs listed on a few Internet job-hunting sites. There are two job postings for network and system administrators. How can this help you in footprint the organization?

  A. The IP range used by the target network
  B. An understanding of the number of employees in the company
  C. How strong the corporate security policy is
  D. The types of operating systems and applications being used.
  D. The types of operating systems and applications being used.

• Question 156:

  Jacob would like your advice on using a wireless hacking tool that can save him time and get him better results with lesser packets. You would like to recommend a tool that uses KoreK's implementation. Which tool would you recommend from the list below?

  A. Kismet
  B. Shmoo
  C. Aircrack
  D. John the Ripper
  C. Aircrack

• Question 157:

  When a malicious hacker identifies a target and wants to eventually compromise this target, what would be among the first steps that he would perform? (Choose the best answer)

  A. Cover his tracks by eradicating the log files and audit trails.
  B. Gain access to the remote computer in order to conceal the venue of attacks.
  C. Perform a reconnaissance of the remote target for identical of venue of attacks.
  D. Always begin with a scan in order to quickly identify venue of attacks.
  C. Perform a reconnaissance of the remote target for identical of venue of attacks.

• Question 158:

  Fred is the network administrator for his company. Fred is testing an internal switch. From an external IP address, Fred wants to try and trick this switch into thinking it already has established a session with his computer. How can Fred accomplish this?

  A. Fred can accomplish this by sending an IP packet with the RST/SIN bit and the source address of his computer.
  B. He can send an IP packet with the SYN bit and the source address of his computer.
  C. Fred can send an IP packet with the ACK bit set to zero and the source address of the switch.
  D. Fred can send an IP packet to the switch with the ACK bit and the source address of his machine.
  D. Fred can send an IP packet to the switch with the ACK bit and the source address of his machine.

• Question 159:

  Peter is a Linux network admin. As a knowledgeable security consultant, he turns to you to look for help on a firewall. He wants to use Linux as his firewall and use the latest freely available version that is offered. What do you recommend? Select the best answer.

  A. Ipchains
  B. Iptables
  C. Checkpoint FW for Linux
  D. Ipfwadm
  B. Iptables

• Question 160:

  Google uses a unique cookie for each browser used by an individual user on a computer. This cookie contains information that allows Google to identify records about that user on its database. This cookie is submitted every time a user launches a Google search, visits a site using AdSense etc. The information stored in Google's database, identified by the cookie, includes

  Everything you search for using Google Every web page you visit that has Google Adsense ads

  How would you prevent Google from storing your search keywords?

  A. Block Google Cookie by applying Privacy and Security settings in your web browser
  B. Disable the Google cookie using Google Advanced Search settings on Google Search page
  C. Do not use Google but use another search engine Bing which will not collect and store your search keywords
  D. Use MAC OS X instead of Windows 7. Mac OS has higher level of privacy controls by default.
  A. Block Google Cookie by applying Privacy and Security settings in your web browser