GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 41:

  Which of the following is a preventive control?

  A. Smart card authentication
  B. Security policy
  C. Audit trail
  D. Continuity of operations plan
  A. Smart card authentication

• Question 42:

  Jane wishes to forward X-Windows traffic to a remote host as well as POP3 traffic. She is worried that adversaries might be monitoring the communication link and could inspect captured traffic. She would like to tunnel the information to the remote end but does not have VPN capabilities to do so. Which of the following tools can she use to protect the link?

  A. MD5
  B. PGP
  C. RSA
  D. SSH
  D. SSH

• Question 43:

  802.11b is considered a ____________ protocol.

  A. Connectionless
  B. Secure
  C. Unsecure
  D. Token ring based
  E. Unreliable
  C. Unsecure

• Question 44:

  Which of the following programs is usually targeted at Microsoft Office products?

  A. Polymorphic virus
  B. Multipart virus
  C. Macro virus
  D. Stealth virus
  C. Macro virus

• Question 45:

  A pentester gains access to a Windows application server and needs to determine the settings of the built-in Windows firewall. Which command would be used?

  A. Netsh firewall show config
  B. WMIC firewall show config
  C. Net firewall show config
  D. Ipconfig firewall show config
  A. Netsh firewall show config

• Question 46:

  What is Form Scalpel used for?

  A. Dissecting HTML Forms
  B. Dissecting SQL Forms
  C. Analysis of Access Database Forms
  D. Troubleshooting Netscape Navigator
  E. Quatro Pro Analysis Tool
  A. Dissecting HTML Forms

• Question 47:

  Which of the following statements best describes the term Vulnerability?

  A. A weakness or error that can lead to a compromise
  B. An agent that has the potential to take advantage of a weakness
  C. An action or event that might prejudice security
  D. The loss potential of a threat.
  A. A weakness or error that can lead to a compromise

• Question 48:

  Why would an ethical hacker use the technique of firewalking?

  A. It is a technique used to discover wireless network on foot.
  B. It is a technique used to map routers on a network link.
  C. It is a technique used to discover the nature of rules configured on a gateway.
  D. It is a technique used to discover interfaces in promiscuous mode.
  C. It is a technique used to discover the nature of rules configured on a gateway.

• Question 49:

  Which of the following conditions must be given to allow a tester to exploit a Cross-Site Request Forgery (CSRF) vulnerable web application?

  A. The victim user must open the malicious link with an Internet Explorer prior to version 8.
  B. The session cookies generated by the application do not have the HttpOnly flag set.
  C. The victim user must open the malicious link with a Firefox prior to version 3.
  D. The web application should not use random tokens.
  D. The web application should not use random tokens.

• Question 50:

  What type of Virus is shown here?

  

  A. Cavity Virus
  B. Macro Virus
  C. Boot Sector Virus
  D. Metamorphic Virus
  E. Sparse Infector Virus
  E. Sparse Infector Virus