GAQM GAQM Certifications CEH-001 Questions & Answers

• Question 391:

  Which set of access control solutions implements two-factor authentication?

  A. USB token and PIN

  B. Fingerprint scanner and retina scanner

  C. Password and PIN

  D. Account and password

  Correct Answer: A

• Question 392:

  What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

  A. Blue Book

  B. ISO 26029

  C. Common Criteria

  D. The Wassenaar Agreement

  Correct Answer: C

• Question 393:

  If an e-commerce site was put into a live environment and the programmers failed to remove the secret entry point that was used during the application development, what is this secret entry point known as?

  A. SDLC process

  B. Honey pot

  C. SQL injection

  D. Trap door

  Correct Answer: D

• Question 394:

  A Certificate Authority (CA) generates a key pair that will be used for encryption and decryption of email. The integrity of the encrypted email is dependent on the security of which of the following?

  A. Public key

  B. Private key

  C. Modulus length

  D. Email server certificate

  Correct Answer: B

• Question 395:

  Which system consists of a publicly available set of databases that contain domain name registration contact information?

  A. WHOIS

  B. IANA

  C. CAPTCHA

  D. IETF

  Correct Answer: A

• Question 396:

  A tester has been hired to do a web application security test. The tester notices that the site is dynamic and must make use of a back end database.

  In order for the tester to see if SQL injection is possible, what is the first character that the tester should use to attempt breaking a valid SQL request?

  A. Semicolon

  B. Single quote

  C. Exclamation mark

  D. Double quote

  Correct Answer: B

• Question 397:

  Which of the following is a hardware requirement that either an IDS/IPS system or a proxy server must have in order to properly function?

  A. Fast processor to help with network traffic analysis

  B. They must be dual-homed

  C. Similar RAM requirements

  D. Fast network interface cards

  Correct Answer: B

• Question 398:

  What are the three types of compliance that the Open Source Security Testing Methodology Manual (OSSTMM) recognizes?

  A. Legal, performance, audit

  B. Audit, standards based, regulatory

  C. Contractual, regulatory, industry

  D. Legislative, contractual, standards based

  Correct Answer: D

• Question 399:

  While checking the settings on the internet browser, a technician finds that the proxy server settings have been checked and a computer is trying to use itself as a proxy server. What specific octet within the subnet does the technician see?

  A. 10.10.10.10

  B. 127.0.0.1

  C. 192.168.1.1

  D. 192.168.168.168

  Correct Answer: B

• Question 400:

  Which of the following business challenges could be solved by using a vulnerability scanner?

  A. Auditors want to discover if all systems are following a standard naming convention.

  B. A web server was compromised and management needs to know if any further systems were compromised.

  C. There is an emergency need to remove administrator access from multiple machines for an employee that quit.

  D. There is a monthly requirement to test corporate compliance with host application usage and security policies.

  Correct Answer: D