GAQM GAQM Certifications CEH-001 Questions & Answers

• Question 151:

  You work as security technician at XYZ.com. While doing web application testing, you might be required to look through multiple web pages online which can take a long time. Which of the processes listed below would be a more efficient way of doing this type of validation?

  A. Use mget to download all pages locally for further inspection.

  B. Use wget to download all pages locally for further inspection.

  C. Use get* to download all pages locally for further inspection.

  D. Use get() to download all pages locally for further inspection.

  Correct Answer: B

• Question 152:

  Bart is looking for a Windows NT/2000/XP command-line tool that can be used to assign, display, or modify ACL's (access control lists) to files or folders and also one that can be used within batch files. Which of the following tools can be used for that purpose? (Choose the best answer)

  A. PERM.exe

  B. CACLS.exe

  C. CLACS.exe

  D. NTPERM.exe

  Correct Answer: B

• Question 153:

  Which of the following buffer overflow exploits are related to Microsoft IIS web server? (Choose three)

  A. Internet Printing Protocol (IPP) buffer overflow

  B. Code Red Worm

  C. Indexing services ISAPI extension buffer overflow

  D. NeXT buffer overflow

  Correct Answer: ABC

• Question 154:

  On a default installation of Microsoft IIS web server, under which privilege does the web server software execute?

  A. Everyone

  B. Guest

  C. System

  D. Administrator

  Correct Answer: C

• Question 155:

  You are gathering competitive intelligence on XYZ.com. You notice that they have jobs listed on a few Internet job-hunting sites. There are two job postings for network and system administrators. How can this help you in footprint the organization?

  A. The IP range used by the target network

  B. An understanding of the number of employees in the company

  C. How strong the corporate security policy is

  D. The types of operating systems and applications being used.

  Correct Answer: D

• Question 156:

  What are the three phases involved in security testing?

  A. Reconnaissance, Conduct, Report

  B. Reconnaissance, Scanning, Conclusion

  C. Preparation, Conduct, Conclusion

  D. Preparation, Conduct, Billing

  Correct Answer: C

• Question 157:

  You have successfully run a buffer overflow attack against a default IIS installation running on a Windows 2000 Server. The server allows you to spawn a shell. In order to perform the actions you intend to do, you need elevated permission. You need to know what your current privileges are within the shell. Which of the following options would be your current privileges?

  A. Administrator

  B. IUSR_COMPUTERNAME

  C. LOCAL_SYSTEM

  D. Whatever account IIS was installed with

  Correct Answer: C

• Question 158:

  You wish to determine the operating system and type of web server being used. At the same time you wish to arouse no suspicion within the target organization.

  While some of the methods listed below work, which holds the least risk of detection?

  A. Make some phone calls and attempt to retrieve the information using social engineering.

  B. Use nmap in paranoid mode and scan the web server.

  C. Telnet to the web server and issue commands to illicit a response.

  D. Use the netcraft web site look for the target organization's web site.

  Correct Answer: D

• Question 159:

  Which of the following attacks takes best advantage of an existing authenticated connection?

  A. Spoofing

  B. Session Hijacking

  C. Password Sniffing

  D. Password Guessing

  Correct Answer: B

• Question 160:

  Tess King is making use of Digest Authentication for her Web site. Why is this considered to be more secure than Basic authentication?

  A. Basic authentication is broken

  B. The password is never sent in clear text over the network

  C. The password sent in clear text over the network is never reused.

  D. It is based on Kerberos authentication protocol

  Correct Answer: B