GAQM GAQM Certifications CEH-001 Questions & Answers

• Question 541:

  Which types of detection methods are employed by Network Intrusion Detection Systems (NIDS)? (Choose two.)

  A. Signature

  B. Anomaly

  C. Passive

  D. Reactive

  Correct Answer: AB

• Question 542:

  The fundamental difference between symmetric and asymmetric key cryptographic systems is that symmetric key cryptography uses which of the following?

  A. Multiple keys for non-repudiation of bulk data

  B. Different keys on both ends of the transport medium

  C. Bulk encryption for data transmission over fiber

  D. The same key on each end of the transmission medium

  Correct Answer: D

• Question 543:

  Which type of access control is used on a router or firewall to limit network activity?

  A. Mandatory

  B. Discretionary

  C. Rule-based

  D. Role-based

  Correct Answer: C

• Question 544:

  Which NMAP command combination would let a tester scan every TCP port from a class C network that is blocking ICMP with fingerprinting and service detection?

  A. NMAP -PN -A -O -sS 192.168.2.0/24

  B. NMAP -P0 -A -O -p1-65535 192.168.0/24

  C. NMAP -P0 -A -sT -p0-65535 192.168.0/16

  D. NMAP -PN -O -sS -p 1-1024 192.168.0/8

  Correct Answer: B

• Question 545:

  Windows file servers commonly hold sensitive files, databases, passwords and more. Which of the following choices would be a common vulnerability that usually exposes them?

  A. Cross-site scripting

  B. SQL injection

  C. Missing patches

  D. CRLF injection

  Correct Answer: C

• Question 546:

  Which of the following is a protocol that is prone to a man-in-the-middle (MITM) attack and maps a 32-bit address to a 48-bit address?

  A. ICPM

  B. ARP

  C. RARP

  D. ICMP

  Correct Answer: B

• Question 547:

  Which NMAP feature can a tester implement or adjust while scanning for open ports to avoid detection by the network's IDS?

  A. Timing options to slow the speed that the port scan is conducted

  B. Fingerprinting to identify which operating systems are running on the network

  C. ICMP ping sweep to determine which hosts on the network are not available

  D. Traceroute to control the path of the packets sent during the scan

  Correct Answer: A

• Question 548:

  When comparing the testing methodologies of Open Web Application Security Project (OWASP) and Open Source Security Testing Methodology Manual (OSSTMM) the main difference is

  A. OWASP is for web applications and OSSTMM does not include web applications.

  B. OSSTMM is gray box testing and OWASP is black box testing.

  C. OWASP addresses controls and OSSTMM does not.

  D. OSSTMM addresses controls and OWASP does not.

  Correct Answer: D

• Question 549:

  Smart cards use which protocol to transfer the certificate in a secure manner?

  A. Extensible Authentication Protocol (EAP)

  B. Point to Point Protocol (PPP)

  C. Point to Point Tunneling Protocol (PPTP)

  D. Layer 2 Tunneling Protocol (L2TP)

  Correct Answer: A

• Question 550:

  A company firewall engineer has configured a new DMZ to allow public systems to be located away from the internal network. The engineer has three security zones set:

  Untrust (Internet) -(Remote network = 217.77.88.0/24)

  DMZ (DMZ)-(11.12.13.0/24)

  Trust (Intranet) -(192.168.0.0/24)

  The engineer wants to configure remote desktop access from a fixed IP on the remote network to a remote desktop server in the DMZ. Which rule would best fit this requirement?

  A. Permit 217.77.88.0/24 11.12.13.0/24 RDP 3389

  B. Permit 217.77.88.12 11.12.13.50 RDP 3389

  C. Permit 217.77.88.12 11.12.13.0/24 RDP 3389

  D. Permit 217.77.88.0/24 11.12.13.50 RDP 3389

  Correct Answer: B