GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 51:

  In which step Steganography fits in CEH System Hacking Cycle (SHC)

  A. Step 2: Crack the password
  B. Step 1: Enumerate users
  C. Step 3: Escalate privileges
  D. Step 4: Execute applications
  E. Step 5: Hide files
  F. Step 6: Cover your tracks
  E. Step 5: Hide files

• Question 52:

  An attacker has captured a target file that is encrypted with public key cryptography. Which of the attacks below is likely to be used to crack the target file?

  A. Timing attack
  B. Replay attack
  C. Memory trade-off attack
  D. Chosen plain-text attack
  D. Chosen plain-text attack

• Question 53:

  You are programming a buffer overflow exploit and you want to create a NOP sled of 200 bytes in the program exploit.c

  

  What is the hexadecimal value of NOP instruction?

  A. 0x60
  B. 0x80
  C. 0x70
  D. 0x90
  D. 0x90

• Question 54:

  Which of the following defines the role of a root Certificate Authority (CA) in a Public Key Infrastructure (PKI)?

  A. The root CA is the recovery agent used to encrypt data when a user's certificate is lost.
  B. The root CA stores the user's hash value for safekeeping.
  C. The CA is the trusted root that issues certificates.
  D. The root CA is used to encrypt email messages to prevent unintended disclosure of data.
  C. The CA is the trusted root that issues certificates.

• Question 55:

  In the context of Windows Security, what is a 'null' user?

  A. A user that has no skills
  B. An account that has been suspended by the admin
  C. A pseudo account that has no username and password
  D. A pseudo account that was created for security administration purpose
  C. A pseudo account that has no username and password

• Question 56:

  How can telnet be used to fingerprint a web server?

  A. telnet webserverAddress 80 HEAD / HTTP/1.0
  B. telnet webserverAddress 80 PUT / HTTP/1.0
  C. telnet webserverAddress 80 HEAD / HTTP/2.0
  D. telnet webserverAddress 80 PUT / HTTP/2.0
  A. telnet webserverAddress 80 HEAD / HTTP/1.0

• Question 57:

  Clive has been hired to perform a Black-Box test by one of his clients.

  How much information will Clive obtain from the client before commencing his test?

  A. IP Range, OS, and patches installed.
  B. Only the IP address range.
  C. Nothing but corporate name.
  D. All that is available from the client site.
  C. Nothing but corporate name.

• Question 58:

  From the two screenshots below, which of the following is occurring?

  A. 10.0.0.253 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.
  B. 10.0.0.253 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against 10.0.0.2.
  C. 10.0.0.2 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.
  D. 10.0.0.252 is performing an IP scan against 10.0.0.2, 10.0.0.252 is performing a port scan against 10.0.0.2.
  A. 10.0.0.253 is performing an IP scan against 10.0.0.0/24, 10.0.0.252 is performing a port scan against 10.0.0.2.

• Question 59:

  To reduce the attack surface of a system, administrators should perform which of the following processes to remove unnecessary software, services, and insecure configuration settings?

  A. Harvesting
  B. Windowing
  C. Hardening
  D. Stealthing
  C. Hardening

• Question 60:

  Which of the following programming languages is most vulnerable to buffer overflow attacks?

  A. Perl
  B. C++
  C. Python
  D. Java
  B. C++