GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 251:

  Snort is an open source Intrusion Detection system. However, it can also be used for a few other purposes as well. Which of the choices below indicate the other features offered by Snort?

  A. IDS, Packet Logger, Sniffer
  B. IDS, Firewall, Sniffer
  C. IDS, Sniffer, Proxy
  D. IDS, Sniffer, content inspector
  A. IDS, Packet Logger, Sniffer

• Question 252:

  In the following example, which of these is the "exploit"?

  Today, Microsoft Corporation released a security notice. It detailed how a person could bring down the Windows 2003 Server operating system, by sending malformed packets to it. They detailed how this malicious process had been

  automated using basic scripting. Even worse, the new automated method for bringing down the server has already been used to perform denial of service attacks on many large commercial websites.

  Select the best answer.

  A. Microsoft Corporation is the exploit.
  B. The security "hole" in the product is the exploit.
  C. Windows 2003 Server
  D. The exploit is the hacker that would use this vulnerability.
  E. The documented method of how to use the vulnerability to gain unprivileged access.
  E. The documented method of how to use the vulnerability to gain unprivileged access.

• Question 253:

  A company has publicly hosted web applications and an internal Intranet protected by a firewall. Which technique will help protect against enumeration?

  A. Reject all invalid email received via SMTP.
  B. Allow full DNS zone transfers.
  C. Remove A records for internal hosts.
  D. Enable null session pipes.
  C. Remove A records for internal hosts.

• Question 254:

  An engineer is learning to write exploits in C++ and is using the exploit tool Backtrack. The engineer wants to compile the newest C++ exploit and name it calc.exe. Which command would the engineer use to accomplish this?

  A. g++ hackersExploit.cpp -o calc.exe
  B. g++ hackersExploit.py -o calc.exe
  C. g++ -i hackersExploit.pl -o calc.exe
  D. g++ --compile hackersExploit.cpp -o calc.exe
  A. g++ hackersExploit.cpp -o calc.exe

• Question 255:

  Which of the following snort rules look for FTP root login attempts?

  A. alert tcp -> any port 21 (msg:"user root";)
  B. alert tcp -> any port 21 (message:"user root";)
  C. alert ftp -> ftp (content:"user password root";)
  D. alert tcp any any -> any any 21 (content:"user root";)
  D. alert tcp any any -> any any 21 (content:"user root";)

• Question 256:

  According to the CEH methodology, what is the next step to be performed after footprinting?

  A. Enumeration
  B. Scanning
  C. System Hacking
  D. Social Engineering
  E. Expanding Influence
  B. Scanning

• Question 257:

  In order to show improvement of security over time, what must be developed?

  A. Reports
  B. Testing tools
  C. Metrics
  D. Taxonomy of vulnerabilities
  C. Metrics

• Question 258:

  Finding tools to run dictionary and brute forcing attacks against FTP and Web servers is an easy task for hackers. They use tools such as arhontus or brutus to break into remote servers.

  

  A command such as this, will attack a given 10.0.0.34 FTP and Telnet servers simultaneously with a list of passwords and a single login namE. linksys. Many FTP- specific password-guessing tools are also available from major security sites. What defensive measures will you take to protect your network from these attacks?

  A. Never leave a default password
  B. Never use a password that can be found in a dictionary
  C. Never use a password related to your hobbies, pets, relatives, or date of birth.
  D. Use a word that has more than 21 characters from a dictionary as the password
  E. Never use a password related to the hostname, domain name, or anything else that can be found with whois
  A. Never leave a default password
  B. Never use a password that can be found in a dictionary
  C. Never use a password related to your hobbies, pets, relatives, or date of birth.
  E. Never use a password related to the hostname, domain name, or anything else that can be found with whois

• Question 259:

  TCP packets transmitted in either direction after the initial three-way handshake will have which of the following bit set?

  A. SYN flag
  B. ACK flag
  C. FIN flag
  D. XMAS flag
  B. ACK flag

• Question 260:

  This packet was taken from a packet sniffer that monitors a Web server.

  

  This packet was originally 1514 bytes long, but only the first 512 bytes are shown here. This is the standard hexdump representation of a network packet, before being decoded. A hexdump has three columns: the offset of each line, the hexadecimal data, and the ASCII equivalent. This packet contains a 14-byte Ethernet header, a 20-byte IP header, a 20-byte TCP header, an HTTP header ending in two line-feeds (0D 0A 0D 0A) and then the data. By examining the packet identify the name and version of the Web server?

  A. Apache 1.2
  B. IIS 4.0
  C. IIS 5.0
  D. Linux WServer 2.3
  B. IIS 4.0