GAQM GAQM Certifications CEH-001 Questions & Answers

• Question 591:

  Which of the following describes a component of Public Key Infrastructure (PKI) where a copy of a private key is stored to provide third-party access and to facilitate recovery operations?

  A. Key registry

  B. Recovery agent

  C. Directory

  D. Key escrow

  Correct Answer: D

• Question 592:

  What is the main reason the use of a stored biometric is vulnerable to an attack?

  A. The digital representation of the biometric might not be unique, even if the physical characteristic is unique.

  B. Authentication using a stored biometric compares a copy to a copy instead of the original to a copy.

  C. A stored biometric is no longer "something you are" and instead becomes "something you have".

  D. A stored biometric can be stolen and used by an attacker to impersonate the individual identified by the biometric.

  Correct Answer: D

• Question 593:

  When an alert rule is matched in a network-based IDS like snort, the IDS does which of the following?

  A. Drops the packet and moves on to the next one

  B. Continues to evaluate the packet until all rules are checked

  C. Stops checking rules, sends an alert, and lets the packet continue

  D. Blocks the connection with the source IP address in the packet

  Correct Answer: B

• Question 594:

  Passive reconnaissance involves collecting information through which of the following?

  A. Social engineering

  B. Network traffic sniffing

  C. Man in the middle attacks

  D. Publicly accessible sources

  Correct Answer: D

• Question 595:

  During a penetration test, the tester conducts an ACK scan using NMAP against the external interface of the DMZ firewall. NMAP reports that port 80 is unfiltered. Based on this response, which type of packet inspection is the firewall conducting?

  A. Host

  B. Stateful

  C. Stateless

  D. Application

  Correct Answer: C

• Question 596:

  A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed. Which security policy must the security analyst check to see if dial-out modems are allowed?

  A. Firewall-management policy

  B. Acceptable-use policy

  C. Remote-access policy

  D. Permissive policy

  Correct Answer: C

• Question 597:

  A company is using Windows Server 2003 for its Active Directory (AD). What is the most efficient way to crack the passwords for the AD users?

  A. Perform a dictionary attack.

  B. Perform a brute force attack.

  C. Perform an attack with a rainbow table.

  D. Perform a hybrid attack.

  Correct Answer: C

• Question 598:

  Which tool is used to automate SQL injections and exploit a database by forcing a given web application to connect to another database controlled by a hacker?

  A. DataThief

  B. NetCat

  C. Cain and Abel

  D. SQLInjector

  Correct Answer: D

• Question 599:

  During a wireless penetration test, a tester detects an access point using WPA2 encryption. Which of the following attacks should be used to obtain the key?

  A. The tester must capture the WPA2 authentication handshake and then crack it.

  B. The tester must use the tool inSSIDer to crack it using the ESSID of the network.

  C. The tester cannot crack WPA2 because it is in full compliance with the IEEE 802.11i standard.

  D. The tester must change the MAC address of the wireless network card and then use the AirTraf tool to obtain the key.

  Correct Answer: A

• Question 600:

  A hacker, who posed as a heating and air conditioning specialist, was able to install a sniffer program in a switched environment network. Which attack could the hacker use to sniff all of the packets in the network?

  A. Fraggle

  B. MAC Flood

  C. Smurf

  D. Tear Drop

  Correct Answer: B