GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 611:

  Bob is a very security conscious computer user. He plans to test a site that is known to have malicious applets, code, and more. Bob always make use of a basic Web Browser to perform such testing. Which of the following web browser can adequately fill this purpose?

  A. Internet Explorer
  B. Mozila
  C. Lynx
  D. Tiger
  C. Lynx

• Question 612:

  Bob is going to perform an active session hijack against Brownies Inc. He has found a target that allows session oriented connections (Telnet) and performs the sequence prediction on the target operating system. He manages to find an active session due to the high level of traffic on the network. What is Bob supposed to do next?

  A. Take over the session
  B. Reverse sequence prediction
  C. Guess the sequence numbers
  D. Take one of the parties offline
  C. Guess the sequence numbers

• Question 613:

  SOAP services use which technology to format information?

  A. SATA
  B. PCI
  C. XML
  D. ISDN
  C. XML

• Question 614:

  Paul has just finished setting up his wireless network. He has enabled numerous security features such as changing the default SSID, enabling WPA encryption, and enabling MAC filtering on his wireless router. Paul notices that when he uses his wireless connection, the speed is sometimes 54 Mbps and sometimes it is only 24Mbps or less. Paul connects to his wireless router's management utility and notices that a machine with an unfamiliar name is connected through his wireless connection. Paul checks the router's logs and notices that the unfamiliar machine has the same MAC address as his laptop. What is Paul seeing here?

  A. MAC spoofing
  B. Macof
  C. ARP spoofing
  D. DNS spoofing
  A. MAC spoofing

• Question 615:

  _____ is the process of converting something from one representation to the simplest form. It deals with the way in which systems convert data from one form to another.

  A. Canonicalization
  B. Character Mapping
  C. Character Encoding
  D. UCS transformation formats
  A. Canonicalization

• Question 616:

  Which of the following tools will scan a network to perform vulnerability checks and compliance auditing?

  A. NMAP
  B. Metasploit
  C. Nessus
  D. BeEF
  C. Nessus

• Question 617:

  Ursula is a college student at a University in Amsterdam. Ursula originally went to college to study engineering but later changed to marine biology after spending a month at sea with her friends. These friends frequently go out to sea to follow and harass fishing fleets that illegally fish in foreign waters. Ursula eventually wants to put companies practicing illegal fishing out of business. Ursula decides to hack into the parent company's computers and destroy critical data knowing fully well that, if caught, she probably would be sent to jail for a very long time. What would Ursula be considered?

  A. Ursula would be considered a gray hat since she is performing an act against illegal activities.
  B. She would be considered a suicide hacker.
  C. She would be called a cracker.
  D. Ursula would be considered a black hat.
  B. She would be considered a suicide hacker.

• Question 618:

  Tess King, the evil hacker, is purposely sending fragmented ICMP packets to a remote target. The total size of this ICMP packet once reconstructed is over 65, 536 bytes. From the information given, what type of attack is Tess King attempting to perform?

  A. Syn flood
  B. Smurf
  C. Ping of death
  D. Fraggle
  C. Ping of death

• Question 619:

  In Buffer Overflow exploit, which of the following registers gets overwritten with return address of the exploit code?

  A. EEP
  B. ESP
  C. EAP
  D. EIP
  D. EIP

• Question 620:

  A client has approached you with a penetration test requirements. They are concerned with the possibility of external threat, and have invested considerable resources in protecting their Internet exposure. However, their main concern is the possibility of an employee elevating his/her privileges and gaining access to information outside of their respective department.

  What kind of penetration test would you recommend that would best address the client's concern?

  A. A Black Box test
  B. A Black Hat test
  C. A Grey Box test
  D. A Grey Hat test
  E. A White Box test
  F. A White Hat test
  C. A Grey Box test