GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 71:

  Attackers target HINFO record types stored on a DNS server to enumerate information. These are information records and potential source for reconnaissance. A network administrator has the option of entering host information specifically the CPU type and operating system when creating a new DNS record. An attacker can extract this type of information easily from a DNS server.

  Which of the following commands extracts the HINFO record?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 72:

  Exhibit:

  

  Based on the following extract from the log of a compromised machine, what is the hacker really trying to steal?

  A. har.txt
  B. SAM file
  C. wwwroot
  D. Repair file
  B. SAM file

• Question 73:

  What would best be defined as a security test on services against a known vulnerability database using an automated tool?

  A. A penetration test
  B. A privacy review
  C. A server audit
  D. A vulnerability assessment
  D. A vulnerability assessment

• Question 74:

  What are two types of ICMP code used when using the ping command?

  A. It uses types 0 and 8.
  B. It uses types 13 and 14.
  C. It uses types 15 and 17.
  D. The ping command does not use ICMP but uses UDP.
  A. It uses types 0 and 8.

• Question 75:

  As a securing consultant, what are some of the things you would recommend to a company to ensure DNS security? Select the best answers.

  A. Use the same machines for DNS and other applications
  B. Harden DNS servers
  C. Use split-horizon operation for DNS servers
  D. Restrict Zone transfers
  E. Have subnet diversity between DNS servers
  B. Harden DNS servers
  C. Use split-horizon operation for DNS servers
  D. Restrict Zone transfers
  E. Have subnet diversity between DNS servers

• Question 76:

  John wishes to install a new application onto his Windows 2000 server. He wants to ensure that any application he uses has not been Trojaned. What can he do to help ensure this?

  A. Compare the file's MD5 signature with the one published on the distribution media
  B. Obtain the application via SSL
  C. Compare the file's virus signature with the one published on the distribution media
  D. Obtain the application from a CD-ROM disc
  A. Compare the file's MD5 signature with the one published on the distribution media

• Question 77:

  International Organization for Standardization (ISO) standard 27002 provides guidance for compliance by outlining

  A. guidelines and practices for security controls.
  B. financial soundness and business viability metrics.
  C. standard best practice for configuration management.
  D. contract agreement writing standards.
  A. guidelines and practices for security controls.

• Question 78:

  When working with Windows systems, what is the RID of the true administrator account?

  A. 500
  B. 501
  C. 512
  D. 1001
  E. 1024
  F. 1000
  A. 500

• Question 79:

  Global deployment of RFC 2827 would help mitigate what classification of attack?

  A. Sniffing attack
  B. Denial of service attack
  C. Spoofing attack
  D. Reconnaissance attack
  E. Prot Scan attack
  C. Spoofing attack

• Question 80:

  Which of the following is a characteristic of Public Key Infrastructure (PKI)?

  A. Public-key cryptosystems are faster than symmetric-key cryptosystems.
  B. Public-key cryptosystems distribute public-keys within digital signatures.
  C. Public-key cryptosystems do not require a secure key distribution channel.
  D. Public-key cryptosystems do not provide technical non-repudiation via digital signatures.
  B. Public-key cryptosystems distribute public-keys within digital signatures.