GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 211:

  What is the main reason the use of a stored biometric is vulnerable to an attack?

  A. The digital representation of the biometric might not be unique, even if the physical characteristic is unique.
  B. Authentication using a stored biometric compares a copy to a copy instead of the original to a copy.
  C. A stored biometric is no longer "something you are" and instead becomes "something you have".
  D. A stored biometric can be stolen and used by an attacker to impersonate the individual identified by the biometric.
  D. A stored biometric can be stolen and used by an attacker to impersonate the individual identified by the biometric.

• Question 212:

  Which of the following LM hashes represents a password of less than 8 characters?

  A. 0182BD0BD4444BF836077A718CCDF409
  B. 44EFCE164AB921CQAAD3B435B51404EE
  C. BA810DBA98995F1817306D272A9441BB
  D. CEC52EB9C8E3455DC2265B23734E0DAC
  E. B757BF5C0D87772FAAD3B435B51404EE
  F. E52CAC67419A9A224A3B108F3FA6CB6D
  B. 44EFCE164AB921CQAAD3B435B51404EE
  E. B757BF5C0D87772FAAD3B435B51404EE

• Question 213:

  Jayden is a network administrator for her company. Jayden wants to prevent MAC spoofing on all the Cisco switches in the network. How can she accomplish this?

  A. Jayden can use the commanD. ip binding set.
  B. Jayden can use the commanD. no ip spoofing.
  C. She should use the commanD. no dhcp spoofing.
  D. She can use the commanD. ip dhcp snooping binding.
  D. She can use the commanD. ip dhcp snooping binding.

• Question 214:

  LM authentication is not as strong as Windows NT authentication so you may want to disable its use, because an attacker eavesdropping on network traffic will attack the weaker protocol. A successful attack can compromise the user's password. How do you disable LM authentication in Windows XP?

  A. Stop the LM service in Windows XP
  B. Disable LSASS service in Windows XP
  C. Disable LM authentication in the registry
  D. Download and install LMSHUT.EXE tool from Microsoft website
  C. Disable LM authentication in the registry

• Question 215:

  What is the BEST alternative if you discover that a rootkit has been installed on one of your computers?

  A. Copy the system files from a known good system
  B. Perform a trap and trace
  C. Delete the files and try to determine the source
  D. Reload from a previous backup
  E. Reload from known good media
  E. Reload from known good media

• Question 216:

  An NMAP scan of a server shows port 25 is open. What risk could this pose?

  A. Open printer sharing
  B. Web portal data leak
  C. Clear text authentication
  D. Active mail relay
  D. Active mail relay

• Question 217:

  What does ICMP (type 11, code 0) denote?

  A. Source Quench
  B. Destination Unreachable C. Time Exceeded
  D. Unknown Type
  C

• Question 218:

  Pandora is used to attack __________ network operating systems.

  A. Windows
  B. UNIX
  C. Linux
  D. Netware
  E. MAC OS
  D. Netware

• Question 219:

  Shayla is an IT security consultant, specializing in social engineering and external penetration tests. Shayla has been hired on by Treks Avionics, a subcontractor for the Department of Defense. Shayla has been given authority to perform any and all tests necessary to audit the company's network security.

  No employees for the company, other than the IT director, know about Shayla's work she will be doing. Shayla's first step is to obtain a list of employees through company website contact pages. Then she befriends a female employee of the company through an online chat website. After meeting with the female employee numerous times, Shayla is able to gain her trust and they become friends. One day, Shayla steals the employee's access badge and uses it to gain unauthorized access to the Treks Avionics offices.

  What type of insider threat would Shayla be considered?

  A. She would be considered an Insider Affiliate
  B. Because she does not have any legal access herself, Shayla would be considered an Outside Affiliate
  C. Shayla is an Insider Associate since she has befriended an actual employee
  D. Since Shayla obtained access with a legitimate company badge; she would be considered a Pure Insider
  A. She would be considered an Insider Affiliate

• Question 220:

  Company A and Company B have just merged and each has its own Public Key Infrastructure (PKI). What must the Certificate Authorities (CAs) establish so that the private PKIs for Company A and Company B trust one another and each private PKI can validate digital certificates from the other company?

  A. Poly key exchange
  B. Cross certification
  C. Poly key reference
  D. Cross-site exchange
  B. Cross certification