GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 511:

  This kind of attack will let you assume a users identity at a dynamically generated web page or site:

  A. SQL Injection
  B. Cross Site Scripting
  C. Session Hijacking
  D. Zone Transfer
  B. Cross Site Scripting

• Question 512:

  A network security administrator is worried about potential man-in-the-middle attacks when users access a corporate web site from their workstations. Which of the following is the best remediation against this type of attack?

  A. Implementing server-side PKI certificates for all connections
  B. Mandating only client-side PKI certificates for all connections
  C. Requiring client and server PKI certificates for all connections
  D. Requiring strong authentication for all DNS queries
  C. Requiring client and server PKI certificates for all connections

• Question 513:

  A distributed port scan operates by:

  A. Blocking access to the scanning clients by the targeted host
  B. Using denial-of-service software against a range of TCP ports
  C. Blocking access to the targeted host by each of the distributed scanning clients
  D. Having multiple computers each scan a small number of ports, then correlating the results
  D. Having multiple computers each scan a small number of ports, then correlating the results

• Question 514:

  _________ ensures that the enforcement of organizational security policy does not rely on voluntary web application user compliance. It secures information by assigning sensitivity labels on information and comparing this to the level of security a user is operating at.

  A. Mandatory Access Control
  B. Authorized Access Control
  C. Role-based Access Control
  D. Discretionary Access Control
  A. Mandatory Access Control

• Question 515:

  What is War Dialing?

  A. War dialing involves the use of a program in conjunction with a modem to penetrate the modem/PBX-based systems
  B. War dialing is a vulnerability scanning technique that penetrates Firewalls
  C. It is a social engineering technique that uses Phone calls to trick victims
  D. Involves IDS Scanning Fragments to bypass Internet filters and stateful Firewalls
  A. War dialing involves the use of a program in conjunction with a modem to penetrate the modem/PBX-based systems

• Question 516:

  Steve scans the network for SNMP enabled devices. Which port number Steve should scan?

  A. 150
  B. 161
  C. 169
  D. 69
  B. 161

• Question 517:

  What is GINA?

  A. Gateway Interface Network Application
  B. GUI Installed Network Application CLASS
  C. Global Internet National Authority (G-USA)
  D. Graphical Identification and Authentication DLL
  D. Graphical Identification and Authentication DLL

• Question 518:

  You are trying to break into a highly classified top-secret mainframe computer with highest security system in place at Merclyn Barley Bank located in Los Angeles. You know that conventional hacking doesn't work in this case, because organizations such as banks are generally tight and secure when it comes to protecting their systems. In other words you are trying to penetrate an otherwise impenetrable system. How would you proceed?

  A. Look for "zero-day" exploits at various underground hacker websites in Russia and China and buy the necessary exploits from these hackers and target the bank's network
  B. Try to hang around the local pubs or restaurants near the bank, get talking to a poorly- paid or disgruntled employee, and offer them money if they'll abuse their access privileges by providing you with sensitive information
  C. Launch DDOS attacks against Merclyn Barley Bank's routers and firewall systems using 100, 000 or more "zombies" and "bots"
  D. Try to conduct Man-in-the-Middle (MiTM) attack and divert the network traffic going to the Merclyn Barley Bank's Webserver to that of your machine using DNS Cache Poisoning techniques
  B. Try to hang around the local pubs or restaurants near the bank, get talking to a poorly- paid or disgruntled employee, and offer them money if they'll abuse their access privileges by providing you with sensitive information

• Question 519:

  Clive is conducting a pen-test and has just port scanned a system on the network. He has identified the operating system as Linux and been able to elicit responses from ports 23, 25 and 53. He infers port 23 as running Telnet service, port 25 as running SMTP service and port 53 as running DNS service. The client confirms these findings and attests to the current availability of the services. When he tries to telnet to port 23 or 25, he gets a blank screen in response. On typing other commands, he sees only blank spaces or underscores symbols on the screen. What are you most likely to infer from this?

  A. The services are protected by TCP wrappers
  B. There is a honeypot running on the scanned machine
  C. An attacker has replaced the services with trojaned ones
  D. This indicates that the telnet and SMTP server have crashed
  A. The services are protected by TCP wrappers

• Question 520:

  Sandra is conducting a penetration test for XYZ.com. She knows that XYZ.com is using wireless networking for some of the offices in the building right down the street. Through social engineering she discovers that they are using 802.11g. Sandra knows that 802.11g uses the same 2.4GHz frequency range as 802.11b. Using NetStumbler and her 802.11b wireless NIC, Sandra drives over to the building to map the wireless networks. However, even though she repositions herself around the building several times, Sandra is not able to detect a single AP.

  What do you think is the reason behind this?

  A. Netstumbler does not work against 802.11g.
  B. You can only pick up 802.11g signals with 802.11a wireless cards.
  C. The access points probably have WEP enabled so they cannot be detected.
  D. The access points probably have disabled broadcasting of the SSID so they cannot be detected.
  E. 802.11g uses OFDM while 802.11b uses DSSS so despite the same frequency and 802.11b card cannot see an 802.11g signal.
  F. Sandra must be doing something wrong, as there is no reason for her to not see the signals.
  E. 802.11g uses OFDM while 802.11b uses DSSS so despite the same frequency and 802.11b card cannot see an 802.11g signal.