GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 361:

  A security policy will be more accepted by employees if it is consistent and has the support of

  A. coworkers.
  B. executive management.
  C. the security officer.
  D. a supervisor.
  B. executive management.

• Question 362:

  What is a Trojan Horse?

  A. A malicious program that captures your username and password
  B. Malicious code masquerading as or replacing legitimate code
  C. An unauthorized user who gains access to your user database and adds themselves as a user
  D. A server that is to be sacrificed to all hacking attempts in order to log and monitor the hacking activity
  B. Malicious code masquerading as or replacing legitimate code

• Question 363:

  Which of the following does proper basic configuration of snort as a network intrusion detection system require?

  A. Limit the packets captured to the snort configuration file.
  B. Capture every packet on the network segment.
  C. Limit the packets captured to a single segment.
  D. Limit the packets captured to the /var/log/snort directory.
  A. Limit the packets captured to the snort configuration file.

• Question 364:

  Which of the following identifies the three modes in which Snort can be configured to run?

  A. Sniffer, Packet Logger, and Network Intrusion Detection System
  B. Sniffer, Network Intrusion Detection System, and Host Intrusion Detection System
  C. Sniffer, Host Intrusion Prevention System, and Network Intrusion Prevention System
  D. Sniffer, Packet Logger, and Host Intrusion Prevention System
  A. Sniffer, Packet Logger, and Network Intrusion Detection System

• Question 365:

  Here is the ASCII Sheet.

  

  You want to guess the DBO username juggyboy (8 characters) using Blind SQL Injection technique. What is the correct syntax?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 366:

  Which of the following are well know password-cracking programs?(Choose all that apply.

  A. L0phtcrack
  B. NetCat
  C. Jack the Ripper
  D. Netbus
  E. John the Ripper
  A. L0phtcrack
  E. John the Ripper

• Question 367:

  If you come across a sheepdip machaine at your client site, what would you infer?

  A. A sheepdip computer is used only for virus checking.
  B. A sheepdip computer is another name for honeypop.
  C. A sheepdip coordinates several honeypots.
  D. A sheepdip computer defers a denial of service attack.
  A. A sheepdip computer is used only for virus checking.

• Question 368:

  Which system consists of a publicly available set of databases that contain domain name registration contact information?

  A. WHOIS
  B. IANA
  C. CAPTCHA
  D. IETF
  A. WHOIS

• Question 369:

  Null sessions are un-authenticated connections (not using a username or password.) to an NT or 2000 system. Which TCP and UDP ports must you filter to check null sessions on your network?

  A. 137 and 139
  B. 137 and 443
  C. 139 and 443
  D. 139 and 445
  D. 139 and 445

• Question 370:

  StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use _____ defense against buffer overflow attacks.

  A. Canary
  B. Hex editing
  C. Format checking
  D. Non-executing stack
  A. Canary