GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 221:

  Which of the following examples best represents a logical or technical control?

  A. Security tokens
  B. Heating and air conditioning
  C. Smoke and fire alarms
  D. Corporate security policy
  A. Security tokens

• Question 222:

  Exhibit:

  

  Given the following extract from the snort log on a honeypot, what do you infer from the attack?

  A. A new port was opened
  B. A new user id was created
  C. The exploit was successful
  D. The exploit was not successful
  D. The exploit was not successful

• Question 223:

  Which of the following cryptography attack methods is usually performed without the use of a computer?

  A. Ciphertext-only attack
  B. Chosen key attack
  C. Rubber hose attack
  D. Rainbow table attack
  C. Rubber hose attack

• Question 224:

  Why do you need to capture five to ten million packets in order to crack WEP with AirSnort?

  A. All IVs are vulnerable to attack
  B. Air Snort uses a cache of packets
  C. Air Snort implements the FMS attack and only encrypted packets are counted
  D. A majority of weak IVs transmitted by access points and wireless cards are not filtered by contemporary wireless manufacturers
  C. Air Snort implements the FMS attack and only encrypted packets are counted

• Question 225:

  A security consultant is trying to bid on a large contract that involves penetration testing and reporting. The company accepting bids wants proof of work so the consultant prints out several audits that have been performed. Which of the following is likely to occur as a result?

  A. The consultant will ask for money on the bid because of great work.
  B. The consultant may expose vulnerabilities of other companies.
  C. The company accepting bids will want the same type of format of testing.
  D. The company accepting bids will hire the consultant because of the great work performed.
  B. The consultant may expose vulnerabilities of other companies.

• Question 226:

  What type of Virus is shown here?

  

  A. Macro Virus
  B. Cavity Virus
  C. Boot Sector Virus
  D. Metamorphic Virus
  E. Sparse Infector Virus
  B. Cavity Virus

• Question 227:

  A penetration tester is attempting to scan an internal corporate network from the internet without alerting the border sensor. Which is the most efficient technique should the tester consider using?

  A. Spoofing an IP address
  B. Tunneling scan over SSH
  C. Tunneling over high port numbers
  D. Scanning using fragmented IP packets
  B. Tunneling scan over SSH

• Question 228:

  Which of the following are password cracking tools? (Choose three.)

  A. BTCrack
  B. John the Ripper
  C. KerbCrack
  D. Nikto
  E. Cain and Abel
  F. Havij
  B. John the Ripper
  C. KerbCrack
  E. Cain and Abel

• Question 229:

  Which type of intrusion detection system can monitor and alert on attacks, but cannot stop them?

  A. Detective
  B. Passive
  C. Intuitive
  D. Reactive
  B. Passive

• Question 230:

  If the final set of security controls does not eliminate all risk in a system, what could be done next?

  A. Continue to apply controls until there is zero risk.
  B. Ignore any remaining risk.
  C. If the residual risk is low enough, it can be accepted.
  D. Remove current controls since they are not completely effective.
  C. If the residual risk is low enough, it can be accepted.