GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 201:

  Which of the following Nmap commands would be used to perform a stack fingerprinting?

  A. Nmap -O -p80
  B. Nmap -hU -Q
  C. Nmap -sT -p
  D. Nmap -u -o -w2
  E. Nmap -sS -0p target
  A. Nmap -O -p80

• Question 202:

  Destination unreachable administratively prohibited messages can inform the hacker to what?

  A. That a circuit level proxy has been installed and is filtering traffic
  B. That his/her scans are being blocked by a honeypot or jail
  C. That the packets are being malformed by the scanning software
  D. That a router or other packet-filtering device is blocking traffic
  E. That the network is functioning normally
  D. That a router or other packet-filtering device is blocking traffic

• Question 203:

  Which one of the following instigates a SYN flood attack?

  A. Generating excessive broadcast packets.
  B. Creating a high number of half-open connections.
  C. Inserting repetitive Internet Relay Chat (IRC) messages.
  D. A large number of Internet Control Message Protocol (ICMP) traces.
  B. Creating a high number of half-open connections.

• Question 204:

  Which of the following tool would be considered as Signature Integrity Verifier (SIV)?

  A. Nmap
  B. SNORT
  C. VirusSCAN
  D. Tripwire
  D. Tripwire

• Question 205:

  Which of the following open source tools would be the best choice to scan a network for potential targets?

  A. NMAP
  B. NIKTO
  C. CAIN
  D. John the Ripper
  A. NMAP

• Question 206:

  Which protocol and port number might be needed in order to send log messages to a log analysis tool that resides behind a firewall?

  A. UDP 123
  B. UDP 541
  C. UDP 514
  D. UDP 415
  C. UDP 514

• Question 207:

  What is a sniffing performed on a switched network called?

  A. Spoofed sniffing
  B. Passive sniffing
  C. Direct sniffing
  D. Active sniffing
  D. Active sniffing

• Question 208:

  Who is an Ethical Hacker?

  A. A person who hacks for ethical reasons
  B. A person who hacks for an ethical cause
  C. A person who hacks for defensive purposes
  D. A person who hacks for offensive purposes
  C. A person who hacks for defensive purposes

• Question 209:

  John is using tokens for the purpose of strong authentication. He is not confident that his security is considerably strong. In the context of Session hijacking why would you consider this as a false sense of security?

  A. The token based security cannot be easily defeated.
  B. The connection can be taken over after authentication.
  C. A token is not considered strong authentication.
  D. Token security is not widely used in the industry.
  B. The connection can be taken over after authentication.

• Question 210:

  What is Hunt used for?

  A. Hunt is used to footprint networks
  B. Hunt is used to sniff traffic
  C. Hunt is used to hack web servers
  D. Hunt is used to intercept traffic i.e. man-in-the-middle traffic
  E. Hunt is used for password cracking
  D. Hunt is used to intercept traffic i.e. man-in-the-middle traffic