GAQM GAQM Certifications CEH-001 Questions & Answers

• Question 381:

  A pentester is using Metasploit to exploit an FTP server and pivot to a LAN. How will the pentester pivot using Metasploit?

  A. Issue the pivot exploit and set the meterpreter.

  B. Reconfigure the network settings in the meterpreter.

  C. Set the payload to propagate through the meterpreter.

  D. Create a route statement in the meterpreter.

  Correct Answer: D

• Question 382:

  Which security control role does encryption meet?

  A. Preventative

  B. Detective

  C. Offensive

  D. Defensive

  Correct Answer: A

• Question 383:

  A consultant is hired to do physical penetration testing at a large financial company. In the first day of his assessment, the consultant goes to the company`s building dressed like an electrician and waits in the lobby for an employee to pass through the main access gate, then the consultant follows the employee behind to get into the restricted area. Which type of attack did the consultant perform?

  A. Man trap

  B. Tailgating

  C. Shoulder surfing

  D. Social engineering

  Correct Answer: B

• Question 384:

  A hacker is attempting to see which ports have been left open on a network. Which NMAP switch would the hacker use?

  A. -sO

  B. -sP

  C. -sS

  D. -sU

  Correct Answer: A

• Question 385:

  The network administrator for a company is setting up a website with e-commerce capabilities. Packet sniffing is a concern because credit card information will be sent electronically over the Internet. Customers visiting the site will need to encrypt the data with HTTPS. Which type of certificate is used to encrypt and decrypt the data?

  A. Asymmetric

  B. Confidential

  C. Symmetric

  D. Non-confidential

  Correct Answer: A

• Question 386:

  Which protocol and port number might be needed in order to send log messages to a log analysis tool that resides behind a firewall?

  A. UDP 123

  B. UDP 541

  C. UDP 514

  D. UDP 415

  Correct Answer: C

• Question 387:

  A certified ethical hacker (CEH) is approached by a friend who believes her husband is cheating. She offers to pay to break into her husband's email account in order to find proof so she can take him to court. What is the ethical response?

  A. Say no; the friend is not the owner of the account.

  B. Say yes; the friend needs help to gather evidence.

  C. Say yes; do the job for free.

  D. Say no; make sure that the friend knows the risk she's asking the CEH to take.

  Correct Answer: A

• Question 388:

  Which statement best describes a server type under an N-tier architecture?

  A. A group of servers at a specific layer

  B. A single server with a specific role

  C. A group of servers with a unique role

  D. A single server at a specific layer

  Correct Answer: C

• Question 389:

  During a penetration test, a tester finds that the web application being analyzed is vulnerable to Cross Site Scripting (XSS). Which of the following conditions must be met to exploit this vulnerability?

  A. The web application does not have the secure flag set.

  B. The session cookies do not have the HttpOnly flag set.

  C. The victim user should not have an endpoint security solution.

  D. The victim's browser must have ActiveX technology enabled.

  Correct Answer: B

• Question 390:

  Advanced encryption standard is an algorithm used for which of the following?

  A. Data integrity

  B. Key discovery

  C. Bulk data encryption

  D. Key recovery

  Correct Answer: C