GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 781:

  Information gathered from social networking websites such as Facebook, Twitter and LinkedIn can be used to launch which of the following types of attacks? (Choose two.)

  A. Smurf attack
  B. Social engineering attack
  C. SQL injection attack
  D. Phishing attack
  E. Fraggle attack
  F. Distributed denial of service attack
  B. Social engineering attack
  D. Phishing attack

• Question 782:

  You are conducting a port scan on a subnet that has ICMP blocked. You have discovered 23 live systems and after scanning each of them you notice that they all show port 21 in closed state. What should be the next logical step that should be performed?

  A. Connect to open ports to discover applications.
  B. Perform a ping sweep to identify any additional systems that might be up.
  C. Perform a SYN scan on port 21 to identify any additional systems that might be up.
  D. Rescan every computer to verify the results.
  C. Perform a SYN scan on port 21 to identify any additional systems that might be up.

• Question 783:

  Botnets are networks of compromised computers that are controlled remotely and surreptitiously by one or more cyber criminals. How do cyber criminals infect a victim's computer with bots? (Select 4 answers)

  A. Attackers physically visit every victim's computer to infect them with malicious software
  B. Home computers that have security vulnerabilities are prime targets for botnets
  C. Spammers scan the Internet looking for computers that are unprotected and use these "open-doors" to install malicious software
  D. Attackers use phishing or spam emails that contain links or attachments
  E. Attackers use websites to host the bots utilizing Web Browser vulnerabilities
  B. Home computers that have security vulnerabilities are prime targets for botnets
  C. Spammers scan the Internet looking for computers that are unprotected and use these "open-doors" to install malicious software
  D. Attackers use phishing or spam emails that contain links or attachments
  E. Attackers use websites to host the bots utilizing Web Browser vulnerabilities

• Question 784:

  Sniffing is considered an active attack.

  A. True
  B. False
  B. False

• Question 785:

  Fingerprinting VPN firewalls is possible with which of the following tools?

  A. Angry IP
  B. Nikto
  C. Ike-scan
  D. Arp-scan
  C. Ike-scan

• Question 786:

  Ann would like to perform a reliable scan against a remote target. She is not concerned about being stealth at this point. Which of the following type of scans would be the most accurate and reliable option?

  A. A half-scan
  B. A UDP scan
  C. A TCP Connect scan
  D. A FIN scan
  C. A TCP Connect scan

• Question 787:

  A buffer overflow occurs when a program or process tries to store more data in a buffer (temporary data storage area) then it was intended to hold. What is the most common cause of buffer overflow in software today?

  A. Bad permissions on files.
  B. High bandwidth and large number of users.
  C. Usage of non standard programming languages.
  D. Bad quality assurance on software produced.
  D. Bad quality assurance on software produced.

• Question 788:

  Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network. Which of these tools would do the SNMP enumeration he is looking for? Select the best answers.

  A. SNMPUtil
  B. SNScan
  C. SNMPScan
  D. Solarwinds IP Network Browser
  E. NMap
  A. SNMPUtil
  B. SNScan
  D. Solarwinds IP Network Browser

• Question 789:

  In order to attack a wireless network, you put up an access point and override the signal of the real access point. As users send authentication data, you are able to capture it. What kind of attack is this?

  A. WEP attack
  B. Drive by hacking
  C. Rogue access point attack
  D. Unauthorized access point attack
  C. Rogue access point attack

• Question 790:

  On a Linux device, which of the following commands will start the Nessus client in the background so that the Nessus server can be configured?

  A. nessus +
  B. nessus *s
  C. nessus and
  D. nessus -d
  C. nessus and