GAQM GAQM Certifications CEH-001 Questions & Answers

• Question 421:

  From the two screenshots below, which of the following is occurring?

  A. 10.0.0.253 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.

  B. 10.0.0.253 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against 10.0.0.2.

  C. 10.0.0.2 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.

  D. 10.0.0.252 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against 10.0.0.2.

  Correct Answer: A

• Question 422:

  Which of the following programming languages is most vulnerable to buffer overflow attacks?

  A. Perl

  B. C++

  C. Python

  D. Java

  Correct Answer: B

• Question 423:

  Which property ensures that a hash function will not produce the same hashed value for two different messages?

  A. Collision resistance

  B. Bit length

  C. Key strength

  D. Entropy

  Correct Answer: A

• Question 424:

  An IT security engineer notices that the company's web server is currently being hacked. What should the engineer do next?

  A. Unplug the network connection on the company's web server.

  B. Determine the origin of the attack and launch a counterattack.

  C. Record as much information as possible from the attack.

  D. Perform a system restart on the company's web server.

  Correct Answer: C

• Question 425:

  During a penetration test, a tester finds a target that is running MS SQL 2000 with default credentials. The tester assumes that the service is running with Local System account. How can this weakness be exploited to access the system?

  A. Using the Metasploit psexec module setting the SA / Admin credential

  B. Invoking the stored procedure xp_shell to spawn a Windows command shell

  C. Invoking the stored procedure cmd_shell to spawn a Windows command shell

  D. Invoking the stored procedure xp_cmdshell to spawn a Windows command shell

  Correct Answer: D

• Question 426:

  Which of the following is a component of a risk assessment?

  A. Physical security

  B. Administrative safeguards

  C. DMZ

  D. Logical interface

  Correct Answer: B

• Question 427:

  What information should an IT system analysis provide to the risk assessor?

  A. Management buy-in

  B. Threat statement

  C. Security architecture

  D. Impact analysis

  Correct Answer: C

• Question 428:

  Which security strategy requires using several, varying methods to protect IT systems against attacks?

  A. Defense in depth

  B. Three-way handshake

  C. Covert channels

  D. Exponential backoff algorithm

  Correct Answer: A

• Question 429:

  Which of the following descriptions is true about a static NAT?

  A. A static NAT uses a many-to-many mapping.

  B. A static NAT uses a one-to-many mapping.

  C. A static NAT uses a many-to-one mapping.

  D. A static NAT uses a one-to-one mapping.

  Correct Answer: D

• Question 430:

  Which United States legislation mandates that the Chief Executive Officer (CEO) and the Chief Financial Officer (CFO) must sign statements verifying the completeness and accuracy of financial reports?

  A. Sarbanes-Oxley Act (SOX)

  B. Gramm-Leach-Bliley Act (GLBA)

  C. Fair and Accurate Credit Transactions Act (FACTA)

  D. Federal Information Security Management Act (FISMA)

  Correct Answer: A