GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 161:

  Neil is a network administrator working in Istanbul. Neil wants to setup a protocol analyzer on his network that will receive a copy of every packet that passes through the main office switch. What type of port will Neil need to setup in order to accomplish this?

  A. Neil will have to configure a Bridged port that will copy all packets to the protocol analyzer.
  B. Neil will need to setup SPAN port that will copy all network traffic to the protocol analyzer.
  C. He will have to setup an Ether channel port to get a copy of all network traffic to the analyzer.
  D. He should setup a MODS port which will copy all network traffic.
  B. Neil will need to setup SPAN port that will copy all network traffic to the protocol analyzer.

• Question 162:

  What are the main drawbacks for anti-virus software?

  A. AV software is difficult to keep up to the current revisions.
  B. AV software can detect viruses but can take no action.
  C. AV software is signature driven so new exploits are not detected.
  D. It's relatively easy for an attacker to change the anatomy of an attack to bypass AV systems
  E. AV software isn't available on all major operating systems platforms.
  F. AV software is very machine (hardware) dependent.
  C. AV software is signature driven so new exploits are not detected.

• Question 163:

  Which of the following algorithms provides better protection against brute force attacks by using a 160-bit message digest?

  A. MD5
  B. SHA-1
  C. RC4
  D. MD4
  B. SHA-1

• Question 164:

  Password cracking programs reverse the hashing process to recover passwords.(True/False.

  A. True
  B. False
  B. False

• Question 165:

  To send a PGP encrypted message, which piece of information from the recipient must the sender have before encrypting the message?

  A. Recipient's private key
  B. Recipient's public key
  C. Master encryption key
  D. Sender's public key
  B. Recipient's public key

• Question 166:

  How do you defend against DHCP Starvation attack?

  

  A. Enable ARP-Block on the switch
  B. Enable DHCP snooping on the switch
  C. Configure DHCP-BLOCK to 1 on the switch
  D. Install DHCP filters on the switch to block this attack
  B. Enable DHCP snooping on the switch

• Question 167:

  When writing shellcodes, you must avoid ____________ because these will end the string.

  

  A. Root bytes
  B. Null bytes
  C. Char bytes
  D. Unicode bytes
  B. Null bytes

• Question 168:

  What is the proper response for a NULL scan if the port is closed?

  A. SYN
  B. ACK
  C. FIN
  D. PSH
  E. RST
  F. No response
  E. RST

• Question 169:

  The SNMP Read-Only Community String is like a password. The string is sent along with each SNMP Get-Request and allows (or denies) access to a device. Most network vendors ship their equipment with a default password of "public". This is the so-called "default public community string". How would you keep intruders from getting sensitive information regarding the network devices using SNMP? (Select 2 answers)

  A. Enable SNMPv3 which encrypts username/password authentication
  B. Use your company name as the public community string replacing the default 'public'
  C. Enable IP filtering to limit access to SNMP device
  D. The default configuration provided by device vendors is highly secure and you don't need to change anything
  A. Enable SNMPv3 which encrypts username/password authentication
  C. Enable IP filtering to limit access to SNMP device

• Question 170:

  Network Administrator Patricia is doing an audit of the network. Below are some of her findings concerning DNS. Which of these would be a cause for alarm?

  Select the best answer.

  A. There are two external DNS Servers for Internet domains. Both are AD integrated.
  B. All external DNS is done by an ISP.
  C. Internal AD Integrated DNS servers are using private DNS names that are
  D. unregistered.
  E. Private IP addresses are used on the internal network and are registered with the internal AD integrated DNS server.
  A. There are two external DNS Servers for Internet domains. Both are AD integrated.