GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 231:

  What file system vulnerability does the following command take advantage of? type c:\anyfile.exe > c:\winnt\system32\calc.exe:anyfile.exe

  A. HFS
  B. ADS
  C. NTFS
  D. Backdoor access
  B. ADS

• Question 232:

  What does black box testing mean?

  A. You have full knowledge of the environment
  B. You have no knowledge of the environment
  C. You have partial knowledge of the environment
  B. You have no knowledge of the environment

• Question 233:

  A recently hired network security associate at a local bank was given the responsibility to perform daily scans of the internal network to look for unauthorized devices. The employee decides to write a script that will scan the network for unauthorized devices every morning at 5:00 am.

  Which of the following programming languages would most likely be used?

  A. PHP
  B. C#
  C. Python
  D. ASP.NET
  C. Python

• Question 234:

  You run nmap port Scan on 10.0.0.5 and attempt to gain banner/server information from services running on ports 21, 110 and 123. Here is the output of your scan results:

  

  Which of the following nmap command did you run?

  A. nmap -A -sV -p21, 110, 123 10.0.0.5
  B. nmap -F -sV -p21, 110, 123 10.0.0.5
  C. nmap -O -sV -p21, 110, 123 10.0.0.5
  D. nmap -T -sV -p21, 110, 123 10.0.0.5
  C. nmap -O -sV -p21, 110, 123 10.0.0.5

• Question 235:

  June, a security analyst, understands that a polymorphic virus has the ability to mutate and can change its known viral signature and hide from signature-based antivirus programs. Can June use an antivirus program in this case and would it be effective against a polymorphic virus?

  A. Yes. June can use an antivirus program since it compares the parity bit of executable files to the database of known check sum counts and it is effective on a polymorphic virus
  B. Yes. June can use an antivirus program since it compares the signatures of executable files to the database of known viral signatures and it is very effective against a polymorphic virus
  C. No. June can't use an antivirus program since it compares the signatures of executable files to the database of known viral signatures and in the case the polymorphic viruses cannot be detected by a signature-based anti-virus program
  D. No. June can't use an antivirus program since it compares the size of executable files to the database of known viral signatures and it is effective on a polymorphic virus
  C. No. June can't use an antivirus program since it compares the signatures of executable files to the database of known viral signatures and in the case the polymorphic viruses cannot be detected by a signature-based anti-virus program

• Question 236:

  After gaining access to the password hashes used to protect access to a web based application, knowledge of which cryptographic algorithms would be useful to gain access to the application?

  A. SHA1
  B. Diffie-Helman
  C. RSA
  D. AES
  A. SHA1

• Question 237:

  Bill is attempting a series of SQL queries in order to map out the tables within the database that he is trying to exploit. Choose the attack type from the choices given below.

  A. Database Fingerprinting
  B. Database Enumeration
  C. SQL Fingerprinting
  D. SQL Enumeration
  A. Database Fingerprinting

• Question 238:

  You have successfully run a buffer overflow attack against a default IIS installation running on a Windows 2000 Server. The server allows you to spawn a shell. In order to perform the actions you intend to do, you need elevated permission. You need to know what your current privileges are within the shell. Which of the following options would be your current privileges?

  A. Administrator
  B. IUSR_COMPUTERNAME
  C. LOCAL_SYSTEM
  D. Whatever account IIS was installed with
  C. LOCAL_SYSTEM

• Question 239:

  You receive an email with the following message:

  Hello Steve,

  We are having technical difficulty in restoring user database record after the recent blackout. Your account data is corrupted. Please logon to the SuperEmailServices.com and change your password.

  http://[email protected]/support/logon.htm

  If you do not reset your password within 7 days, your account will be permanently disabled locking you out from our e-mail services.

  Sincerely,

  Technical Support

  SuperEmailServices

  From this e-mail you suspect that this message was sent by some hacker since you have been using their e-mail services for the last 2 years and they have never sent out an e-mail such as this. You also observe the URL in the message and

  confirm your suspicion about 0xde.0xad.0xbde.0xef which looks like hexadecimal numbers. You immediately enter the following at Windows 2000 command prompt:

  Ping 0xde.0xad.0xbe.0xef

  You get a response with a valid IP address.

  What is the obstructed IP address in the e-mail URL?

  A. 222.173.190.239
  B. 233.34.45.64
  C. 54.23.56.55
  D. 199.223.23.45
  A. 222.173.190.239

• Question 240:

  Which of the following command line switch would you use for OS detection in Nmap?

  A. -D
  B. -O
  C. -P
  D. -X
  B. -O