GAQM GAQM Certifications CEH-001 Questions & Answers

• Question 451:

  While performing data validation of web content, a security technician is required to restrict malicious input. Which of the following processes is an efficient way of restricting malicious input?

  A. Validate web content input for query strings.

  B. Validate web content input with scanning tools.

  C. Validate web content input for type, length, and range.

  D. Validate web content input for extraneous queries.

  Correct Answer: C

• Question 452:

  What are common signs that a system has been compromised or hacked? (Choose three.)

  A. Increased amount of failed logon events

  B. Patterns in time gaps in system and/or event logs

  C. New user accounts created

  D. Consistency in usage baselines

  E. Partitions are encrypted

  F. Server hard drives become fragmented

  Correct Answer: ABC

• Question 453:

  A recently hired network security associate at a local bank was given the responsibility to perform daily scans of the internal network to look for unauthorized devices. The employee decides to write a script that will scan the network for unauthorized devices every morning at 5:00 am.

  Which of the following programming languages would most likely be used?

  A. PHP

  B. C#

  C. Python

  D. ASP.NET

  Correct Answer: C

• Question 454:

  The precaution of prohibiting employees from bringing personal computing devices into a facility is what type of security control?

  A. Physical

  B. Procedural

  C. Technical

  D. Compliance

  Correct Answer: B

• Question 455:

  A botnet can be managed through which of the following?

  A. IRC

  B. E-Mail

  C. Linkedin and Facebook

  D. A vulnerable FTP server

  Correct Answer: A

• Question 456:

  Which of the following is a strong post designed to stop a car?

  A. Gate

  B. Fence

  C. Bollard

  D. Reinforced rebar

  Correct Answer: C

• Question 457:

  Which of the following describes the characteristics of a Boot Sector Virus?

  A. Moves the MBR to another location on the RAM and copies itself to the original location of the MBR

  B. Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR

  C. Modifies directory table entries so that directory entries point to the virus code instead of the actual program

  D. Overwrites the original MBR and only executes the new virus code

  Correct Answer: B

• Question 458:

  Which of the following tools would be the best choice for achieving compliance with PCI Requirement 11?

  A. Truecrypt

  B. Sub7

  C. Nessus

  D. Clamwin

  Correct Answer: C

• Question 459:

  Which of the following techniques does a vulnerability scanner use in order to detect a vulnerability on a target service?

  A. Port scanning

  B. Banner grabbing

  C. Injecting arbitrary data

  D. Analyzing service response

  Correct Answer: D

• Question 460:

  Which of the following is a preventive control?

  A. Smart card authentication

  B. Security policy

  C. Audit trail

  D. Continuity of operations plan

  Correct Answer: A