GAQM GAQM Certifications CEH-001 Questions & Answers

• Question 511:

  When creating a security program, which approach would be used if senior management is supporting and enforcing the security policy?

  A. A bottom-up approach

  B. A top-down approach

  C. A senior creation approach

  D. An IT assurance approach

  Correct Answer: B

• Question 512:

  Which of the following parameters enables NMAP's operating system detection feature?

  A. NMAP -sV

  B. NMAP -oS

  C. NMAP -sR

  D. NMAP -O

  Correct Answer: D

• Question 513:

  Which of the following is an example of IP spoofing?

  A. SQL injections

  B. Man-in-the-middle

  C. Cross-site scripting

  D. ARP poisoning

  Correct Answer: B

• Question 514:

  Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?

  A. Certificate issuance

  B. Certificate validation

  C. Certificate cryptography

  D. Certificate revocation

  Correct Answer: B

• Question 515:

  How do employers protect assets with security policies pertaining to employee surveillance activities?

  A. Employers promote monitoring activities of employees as long as the employees demonstrate trustworthiness.

  B. Employers use informal verbal communication channels to explain employee monitoring activities to employees.

  C. Employers use network surveillance to monitor employee email traffic, network access, and to record employee keystrokes.

  D. Employers provide employees written statements that clearly discuss the boundaries of monitoring activities and consequences.

  Correct Answer: D

• Question 516:

  When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator's computer to update the router configuration. What type of an alert is this?

  A. False positive

  B. False negative

  C. True positve

  D. True negative

  Correct Answer: A

• Question 517:

  There is a WEP encrypted wireless access point (AP) with no clients connected. In order to crack the WEP key, a fake authentication needs to be performed. What information is needed when performing fake authentication to an AP? (Choose two.)

  A. The IP address of the AP

  B. The MAC address of the AP

  C. The SSID of the wireless network

  D. A failed authentication packet

  Correct Answer: BC

• Question 518:

  What type of OS fingerprinting technique sends specially crafted packets to the remote OS and analyzes the received response?

  A. Passive

  B. Reflective

  C. Active

  D. Distributive

  Correct Answer: C

• Question 519:

  Which command line switch would be used in NMAP to perform operating system detection?

  A. -OS

  B. -sO

  C. -sP

  D. -O

  Correct Answer: D

• Question 520:

  Bluetooth uses which digital modulation technique to exchange information between paired devices?

  A. PSK (phase-shift keying)

  B. FSK (frequency-shift keying)

  C. ASK (amplitude-shift keying)

  D. QAM (quadrature amplitude modulation)

  Correct Answer: A