GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 711:

  SSL has been seen as the solution to a lot of common security problems. Administrator will often time make use of SSL to encrypt communications from points A to point B. Why do you think this could be a bad idea if there is an Intrusion Detection System deployed to monitor the traffic between point A and B?

  A. SSL is redundant if you already have IDS's in place
  B. SSL will trigger rules at regular interval and force the administrator to turn them off
  C. SSL will slow down the IDS while it is breaking the encryption to see the packet content
  D. SSL will blind the content of the packet and Intrusion Detection Systems will not be able to detect them
  D. SSL will blind the content of the packet and Intrusion Detection Systems will not be able to detect them

• Question 712:

  How would you prevent session hijacking attacks?

  A. Using biometrics access tokens secures sessions against hijacking
  B. Using non-Internet protocols like http secures sessions against hijacking
  C. Using hardware-based authentication secures sessions against hijacking
  D. Using unpredictable sequence numbers secures sessions against hijacking
  D. Using unpredictable sequence numbers secures sessions against hijacking

• Question 713:

  What type of attack is shown here?

  

  A. Bandwidth exhaust Attack
  B. Denial of Service Attack
  C. Cluster Service Attack
  D. Distributed Denial of Service Attack
  D. Distributed Denial of Service Attack

• Question 714:

  In Trojan terminology, what is a covert channel?

  

  A. A channel that transfers information within a computer system or network in a way that violates the security policy
  B. A legitimate communication path within a computer system or network for transfer of data
  C. It is a kernel operation that hides boot processes and services to mask detection
  D. It is Reverse tunneling technique that uses HTTPS protocol instead of HTTP protocol to establish connections
  A. A channel that transfers information within a computer system or network in a way that violates the security policy

• Question 715:

  Neil notices that a single address is generating traffic from its port 500 to port 500 of several other machines on the network. This scan is eating up most of the network bandwidth and Neil is concerned. As a security professional, what would you infer from this scan?

  A. It is a network fault and the originating machine is in a network loop
  B. It is a worm that is malfunctioning or hardcoded to scan on port 500
  C. The attacker is trying to detect machines on the network which have SSL enabled
  D. The attacker is trying to determine the type of VPN implementation and checking for IPSec
  D. The attacker is trying to determine the type of VPN implementation and checking for IPSec

• Question 716:

  What hacking attack is challenge/response authentication used to prevent?

  A. Replay attacks
  B. Scanning attacks
  C. Session hijacking attacks
  D. Password cracking attacks
  A. Replay attacks

• Question 717:

  How does an operating system protect the passwords used for account logins?

  A. The operating system performs a one-way hash of the passwords.
  B. The operating system stores the passwords in a secret file that users cannot find.
  C. The operating system encrypts the passwords, and decrypts them when needed.
  D. The operating system stores all passwords in a protected segment of non-volatile memory.
  A. The operating system performs a one-way hash of the passwords.

• Question 718:

  In the context of Trojans, what is the definition of a Wrapper?

  A. An encryption tool to protect the Trojan
  B. A tool used to bind the Trojan with a legitimate file
  C. A tool used to calculate bandwidth and CPU cycles wasted by the Trojan
  D. A tool used to encapsulate packets within a new header and footer
  B. A tool used to bind the Trojan with a legitimate file

• Question 719:

  Which of the following ICMP message types are used for destinations unreachables?

  B. 3
  C. 11
  D. 13
  E. 17
  B. 3

• Question 720:

  Which of the following tools can be used to perform a zone transfer?

  A. NSLookup
  B. Finger
  C. Dig
  D. Sam Spade
  E. Host
  F. Netcat
  G. Neotrace
  A. NSLookup
  C. Dig
  D. Sam Spade
  E. Host