GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 291:

  In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Ripper, and running it against user accounts located by the application. The larger the word and word fragment selection, the more effective the dictionary attack is. The brute force method is the most inclusive, although slow. It usually tries every possible letter and number combination in its automated exploration.

  If you would use both brute force and dictionary methods combined together to have variation of words, what would you call such an attack?

  A. Full Blown
  B. Thorough
  C. Hybrid
  D. BruteDics
  C. Hybrid

• Question 292:

  Which of the following is NOT part of CEH Scanning Methodology?

  A. Check for Live systems
  B. Check for Open Ports
  C. Banner Grabbing
  D. Prepare Proxies
  E. Social Engineering attacks
  F. Scan for Vulnerabilities
  G. Draw Network Diagrams
  E. Social Engineering attacks

• Question 293:

  In the context of using PKI, when Sven wishes to send a secret message to Bob, he looks up Bob's public key in a directory, uses it to encrypt the message before sending it off. Bob then uses his private key to decrypt the message and reads it. No one listening on can decrypt the message.

  Anyone can send an encrypted message to Bob but only Bob can read it. Thus, although many people may know Bob's public key and use it to verify Bob's signature, they cannot discover Bob's private key and use it to forge digital signatures.

  What does this principle refer to?

  A. Irreversibility
  B. Non-repudiation
  C. Symmetry
  D. Asymmetry
  D. Asymmetry

• Question 294:

  Name two software tools used for OS guessing? (Choose two.

  A. Nmap
  B. Snadboy
  C. Queso
  D. UserInfo
  E. NetBus
  A. Nmap
  C. Queso

• Question 295:

  This attack technique is used when a Web application is vulnerable to an SQL Injection but the results of the Injection are not visible to the attacker.

  A. Unique SQL Injection
  B. Blind SQL Injection
  C. Generic SQL Injection
  D. Double SQL Injection
  B. Blind SQL Injection

• Question 296:

  Susan has attached to her company's network. She has managed to synchronize her boss's sessions with that of the file server. She then intercepted his traffic destined for the server, changed it the way she wanted to and then placed it on the server in his home directory. What kind of attack is Susan carrying on?

  A. A sniffing attack
  B. A spoofing attack
  C. A man in the middle attack
  D. A denial of service attack
  C. A man in the middle attack

• Question 297:

  Bob waits near a secured door, holding a box. He waits until an employee walks up to the secured door and uses the special card in order to access the restricted area of the target company. Just as the employee opens the door, Bob walks up to the employee (still holding the box) and asks the employee to hold the door open so that he can enter. What is the best way to undermine the social engineering activity of tailgating?

  A. Issue special cards to access secure doors at the company and provide a one-time only brief description of use of the special card
  B. Educate and enforce physical security policies of the company to all the employees on a regular basis
  C. Setup a mock video camera next to the special card reader adjacent to the secure door
  D. Post a sign that states, "no tailgating" next to the special card reader adjacent to the secure door
  B. Educate and enforce physical security policies of the company to all the employees on a regular basis

• Question 298:

  What is "Hacktivism"?

  A. Hacking for a cause
  B. Hacking ruthlessly
  C. An association which groups activists
  D. None of the above
  A. Hacking for a cause

• Question 299:

  In which of the following should be performed first in any penetration test?

  A. System identification
  B. Intrusion Detection System testing
  C. Passive information gathering
  D. Firewall testing
  C. Passive information gathering

• Question 300:

  The SYN flood attack sends TCP connections requests faster than a machine can process them.

  Attacker creates a random source address for each packet SYN flag set in each packet is a request to open a new connection to the server from the spoofed IP address Victim responds to spoofed IP address, then waits for confirmation that never arrives (timeout wait is about 3 minutes) Victim's connection table fills up waiting for replies and ignores new connections Legitimate users are ignored and will not be able to access the server

  How do you protect your network against SYN Flood attacks?

  A. SYN cookies. Instead of allocating a record, send a SYN-ACK with a carefully constructed sequence number generated as a hash of the clients IP address, port number, and other information. When the client responds with a normal ACK, that special sequence number will be included, which the server then verifies. Thus, the server first allocates memory on the third packet of the handshake, not the first.
  B. RST cookies - The server sends a wrong SYN/ACK back to the client. The client should then generate a RST packet telling the server that something is wrong. At this point, the server knows the client is valid and will now accept incoming connections from that client normally
  C. Check the incoming packet's IP address with the SPAM database on the Internet and enable the filter using ACLs at the Firewall
  D. Stack Tweaking. TCP stacks can be tweaked in order to reduce the effect of SYN floods. Reduce the timeout before a stack frees up the memory allocated for a connection
  E. Micro Blocks. Instead of allocating a complete connection, simply allocate a micro record of 16-bytes for the incoming SYN object
  A. SYN cookies. Instead of allocating a record, send a SYN-ACK with a carefully constructed sequence number generated as a hash of the clients IP address, port number, and other information. When the client responds with a normal ACK, that special sequence number will be included, which the server then verifies. Thus, the server first allocates memory on the third packet of the handshake, not the first.
  B. RST cookies - The server sends a wrong SYN/ACK back to the client. The client should then generate a RST packet telling the server that something is wrong. At this point, the server knows the client is valid and will now accept incoming connections from that client normally
  D. Stack Tweaking. TCP stacks can be tweaked in order to reduce the effect of SYN floods. Reduce the timeout before a stack frees up the memory allocated for a connection
  E. Micro Blocks. Instead of allocating a complete connection, simply allocate a micro record of 16-bytes for the incoming SYN object