GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 421:

  Which type of scan is used on the eye to measure the layer of blood vessels?

  A. Facial recognition scan
  B. Retinal scan
  C. Iris scan
  D. Signature kinetics scan
  B. Retinal scan

• Question 422:

  Which cipher encrypts the plain text digit (bit or byte) one by one?

  A. Classical cipher
  B. Block cipher
  C. Modern cipher
  D. Stream cipher
  D. Stream cipher

• Question 423:

  WinDump is a popular sniffer which results from the porting to Windows of TcpDump for Linux. What library does it use?

  A. LibPcap
  B. WinPcap
  C. Wincap
  D. None of the above
  B. WinPcap

• Question 424:

  What type of port scan is shown below?

  

  A. Idle Scan
  B. Windows Scan
  C. XMAS Scan
  D. SYN Stealth Scan
  C. XMAS Scan

• Question 425:

  Which results will be returned with the following Google search query? site:target.com -site:Marketing.target.com accounting

  A. Results matching all words in the query
  B. Results matching "accounting" in domain target.com but not on the site Marketing.target.com
  C. Results from matches on the site marketing.target.com that are in the domain target.com but do not include the word accounting
  D. Results for matches on target.com and Marketing.target.com that include the word "accounting"
  B. Results matching "accounting" in domain target.com but not on the site Marketing.target.com

• Question 426:

  Exhibit:

  

  You are conducting pen-test against a company's website using SQL Injection techniques. You enter "anuthing or 1=1-" in the username filed of an authentication form. This is the output returned from the server.

  What is the next step you should do?

  A. Identify the user context of the web application by running_ http://www.example.com/order/include_rsa_asp?pressReleaseID=5 AND USER_NAME() = `dbo'
  B. Identify the database and table name by running: http://www.example.com/order/include_rsa.asp?pressReleaseID=5 AND ascii(lower(substring((SELECT TOP 1 name FROM sysobjects WHERE xtype='U'), 1))) > 109
  C. Format the C: drive and delete the database by running: http://www.example.com/order/include_rsa.asp?pressReleaseID=5 AND xp_cmdshell `format c: /q /yes `; drop database myDB; -
  D. Reboot the web server by running: http://www.example.com/order/include_rsa.asp?pressReleaseID=5 AND xp_cmdshell `iisreset eboot'; -
  A. Identify the user context of the web application by running_ http://www.example.com/order/include_rsa_asp?pressReleaseID=5 AND USER_NAME() = `dbo'

• Question 427:

  Michael is a junior security analyst working for the National Security Agency (NSA) working primarily on breaking terrorist encrypted messages. The NSA has a number of methods they use to decipher encrypted messages including Government Access to Keys (GAK) and inside informants. The NSA holds secret backdoor keys to many of the encryption algorithms used on the Internet. The problem for the NSA, and Michael, is that terrorist organizations are starting to use custom-built algorithms or obscure algorithms purchased from corrupt governments. For this reason, Michael and other security analysts like him have been forced to find different methods of deciphering terrorist messages. One method that Michael thought of using was to hide malicious code inside seemingly harmless programs. Michael first monitors sites and bulletin boards used by known terrorists, and then he is able to glean email addresses to some of these suspected terrorists. Michael then inserts a stealth keylogger into a mapping program file readme.txt and then sends that as an attachment to the terrorist. This keylogger takes screenshots every 2 minutes and also logs all keyboard activity into a hidden file on the terrorist's computer. Then, the keylogger emails those files to Michael twice a day with a built in SMTP server. What technique has Michael used to disguise this keylogging software?

  A. Steganography
  B. Wrapping
  C. ADS
  D. Hidden Channels
  C. ADS

• Question 428:

  You generate MD5 128-bit hash on all files and folders on your computer to keep a baseline check for security reasons?

  

  What is the length of the MD5 hash?

  A. 32 character
  B. 64 byte
  C. 48 char
  D. 128 kb
  A. 32 character

• Question 429:

  Dan is conducting penetration testing and has found a vulnerability in a Web Application which gave him the sessionID token via a cross site scripting vulnerability. Dan wants to replay this token. However, the session ID manager (on the server) checks the originating IP address as well. Dan decides to spoof his IP address in order to replay the sessionID. Why do you think Dan might not be able to get an interactive session?

  A. Dan cannot spoof his IP address over TCP network
  B. The scenario is incorrect as Dan can spoof his IP and get responses
  C. The server will send replies back to the spoofed IP address
  D. Dan can establish an interactive session only if he uses a NAT
  C. The server will send replies back to the spoofed IP address

• Question 430:

  How is sniffing broadly categorized?

  A. Active and passive
  B. Broadcast and unicast
  C. Unmanaged and managed
  D. Filtered and unfiltered
  A. Active and passive