GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 371:

  Which command lets a tester enumerate alive systems in a class C network via ICMP using native Windows tools?

  A. ping 192.168.2.
  B. ping 192.168.2.255
  C. for %V in (1 1 255) do PING 192.168.2.%V
  D. for /L %V in (1 1 254) do PING -n 1 192.168.2.%V | FIND /I "Reply"
  D. for /L %V in (1 1 254) do PING -n 1 192.168.2.%V | FIND /I "Reply"

• Question 372:

  Attackers footprint target Websites using Google Hacking techniques. Google hacking is a term that refers to the art of creating complex search engine queries. It detects websites that are vulnerable to numerous exploits and vulnerabilities. Google operators are used to locate specific strings of text within the search results.

  The configuration file contains both a username and a password for an SQL database. Most sites with forums run a PHP message base. This file gives you the keys to that forum, including FULL ADMIN access to the database. WordPress uses config.php that stores the database Username and Password.

  Which of the below Google search string brings up sites with "config.php" files?

  

  A. Search:index config/php
  B. Wordpress:index config.php
  C. intitle:index.of config.php
  D. Config.php:index list
  C. intitle:index.of config.php

• Question 373:

  What is the best means of prevention against viruses?

  A. Assign read only permission to all files on your system.
  B. Remove any external devices such as floppy and USB connectors.
  C. Install a rootkit detection tool.
  D. Install and update anti-virus scanner.
  D. Install and update anti-virus scanner.

• Question 374:

  Which type of access control is used on a router or firewall to limit network activity?

  A. Mandatory
  B. Discretionary
  C. Rule-based
  D. Role-based
  C. Rule-based

• Question 375:

  While performing data validation of web content, a security technician is required to restrict malicious input. Which of the following processes is an efficient way of restricting malicious input?

  A. Validate web content input for query strings.
  B. Validate web content input with scanning tools.
  C. Validate web content input for type, length, and range.
  D. Validate web content input for extraneous queries.
  C. Validate web content input for type, length, and range.

• Question 376:

  What type of port scan is shown below?

  

  A. Idle Scan
  B. FIN Scan
  C. XMAS Scan
  D. Windows Scan
  B. FIN Scan

• Question 377:

  Which Steganography technique uses Whitespace to hide secret messages?

  A. snow
  B. beetle
  C. magnet
  D. cat
  A. snow

• Question 378:

  Peter is a Network Admin. He is concerned that his network is vulnerable to a smurf attack.

  What should Peter do to prevent a smurf attack?

  Select the best answer.

  A. He should disable unicast on all routers
  B. Disable multicast on the router
  C. Turn off fragmentation on his router
  D. Make sure all anti-virus protection is updated on all systems
  E. Make sure his router won't take a directed broadcast
  E. Make sure his router won't take a directed broadcast

• Question 379:

  Joseph has just been hired on to a contractor company of the Department of Defense as their Senior Security Analyst. Joseph has been instructed on the company's strict security policies that have been implemented, and the policies that have yet to be put in place. Per the Department of Defense, all DoD users and the users of their contractors must use two- factor authentication to access their networks. Joseph has been delegated the task of researching and implementing the best two-factor authentication method for his company. Joseph's supervisor has told him that they would like to use some type of hardware device in tandem with a security or identifying pin number. Joseph's company has already researched using smart cards and all the resources needed to implement them, but found the smart cards to not be cost effective. What type of device should Joseph use for two- factor authentication?

  A. Biometric device
  B. OTP
  C. Proximity cards
  D. Security token
  D. Security token

• Question 380:

  What is the most secure way to mitigate the theft of corporate information from a laptop that was left in a hotel room?

  A. Set a BIOS password.
  B. Encrypt the data on the hard drive.
  C. Use a strong logon password to the operating system.
  D. Back up everything on the laptop and store the backup in a safe place.
  B. Encrypt the data on the hard drive.