GAQM GAQM Certifications CEH-001 Questions & Answers

• Question 441:

  An NMAP scan of a server shows port 25 is open. What risk could this pose?

  A. Open printer sharing

  B. Web portal data leak

  C. Clear text authentication

  D. Active mail relay

  Correct Answer: D

• Question 442:

  Which of the following are variants of mandatory access control mechanisms? (Choose two.)

  A. Two factor authentication

  B. Acceptable use policy

  C. Username / password

  D. User education program

  E. Sign in register

  Correct Answer: AC

• Question 443:

  An attacker uses a communication channel within an operating system that is neither designed nor intended to transfer information. What is the name of the communications channel?

  A. Classified

  B. Overt

  C. Encrypted

  D. Covert

  Correct Answer: D

• Question 444:

  Which of the following is used to indicate a single-line comment in structured query language (SQL)?

  A. -

  B. ||

  C. %%

  D. ''

  Correct Answer: A

• Question 445:

  What is the primary drawback to using advanced encryption standard (AES) algorithm with a 256 bit key to share sensitive data?

  A. Due to the key size, the time it will take to encrypt and decrypt the message hinders efficient communication.

  B. To get messaging programs to function with this algorithm requires complex configurations.

  C. It has been proven to be a weak cipher; therefore, should not be trusted to protect sensitive data.

  D. It is a symmetric key algorithm, meaning each recipient must receive the key through a different channel than the message.

  Correct Answer: D

• Question 446:

  Pentest results indicate that voice over IP traffic is traversing a network. Which of the following tools will decode a packet capture and extract the voice conversations?

  A. Cain

  B. John the Ripper

  C. Nikto

  D. Hping

  Correct Answer: A

• Question 447:

  In the OSI model, where does PPTP encryption take place?

  A. Transport layer

  B. Application layer

  C. Data link layer

  D. Network layer

  Correct Answer: C

• Question 448:

  What is the main advantage that a network-based IDS/IPS system has over a host-based solution?

  A. They do not use host system resources.

  B. They are placed at the boundary, allowing them to inspect all traffic.

  C. They are easier to install and configure.

  D. They will not interfere with user interfaces.

  Correct Answer: A

• Question 449:

  A technician is resolving an issue where a computer is unable to connect to the Internet using a wireless access point. The computer is able to transfer files locally to other machines, but cannot successfully reach the Internet. When the technician examines the IP address and default gateway they are both on the 192.168.1.0/24. Which of the following has occurred?

  A. The gateway is not routing to a public IP address.

  B. The computer is using an invalid IP address.

  C. The gateway and the computer are not on the same network.

  D. The computer is not using a private IP address.

  Correct Answer: A

• Question 450:

  A Network Administrator was recently promoted to Chief Security Officer at a local university. One of employee's new responsibilities is to manage the implementation of an RFID card access system to a new server room on campus. The server room will house student enrollment information that is securely backed up to an off-site location.

  During a meeting with an outside consultant, the Chief Security Officer explains that he is concerned that the existing security controls have not been designed properly. Currently, the Network Administrator is responsible for approving and issuing RFID card access to the server room, as well as reviewing the electronic access logs on a weekly basis.

  Which of the following is an issue with the situation?

  A. Segregation of duties

  B. Undue influence

  C. Lack of experience

  D. Inadequate disaster recovery plan

  Correct Answer: A