GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 831:

  A digital signature is simply a message that is encrypted with the public key instead of the private key.

  A. true
  B. false
  B. false

• Question 832:

  TCP SYN Flood attack uses the three-way handshake mechanism.

  1.

  An attacker at system A sends a SYN packet to victim at system B.

  2.

  System B sends a SYN/ACK packet to victim A.

  3.

  As a normal three-way handshake mechanism system A should send an ACK packet to system B, however, system A does not send an ACK packet to system B. In this case client B is waiting for an ACK packet from client A. This status of client B is called _________________

  A. "half-closed"
  B. "half open"
  C. "full-open"
  D. "xmas-open"
  B. "half open"

• Question 833:

  On a default installation of Microsoft IIS web server, under which privilege does the web server software execute?

  A. Everyone
  B. Guest
  C. System
  D. Administrator
  C. System

• Question 834:

  Diffie-Hellman (DH) groups determine the strength of the key used in the key exchange process. Which of the following is the correct bit size of the Diffie-Hellman (DH) group 5?

  A. 768 bit key
  B. 1025 bit key
  C. 1536 bit key
  D. 2048 bit key
  C. 1536 bit key

• Question 835:

  What is the default Password Hash Algorithm used by NTLMv2?

  A. MD4
  B. DES
  C. SHA-1
  D. MD5
  D. MD5

• Question 836:

  The following exploit code is extracted from what kind of attack?

  

  A. Remote password cracking attack
  B. SQL Injection
  C. Distributed Denial of Service
  D. Cross Site Scripting
  E. Buffer Overflow
  E. Buffer Overflow

• Question 837:

  Steven the hacker realizes the network administrator of Acme Corporation is using syskey in Windows 2008 Server to protect his resources in the organization. Syskey independently encrypts the hashes so that physical access to the server, tapes, or ERDs is only first step to cracking the passwords. Steven must break through the encryption used by syskey before he can attempt to use brute force dictionary attacks on the hashes. Steven runs a program called "SysCracker" targeting the Windows 2008 Server machine in attempting to crack the hash used by Syskey. He needs to configure the encryption level before he can launch the attack. How many bits does Syskey use for encryption?

  A. 40-bit encryption
  B. 128-bit encryption
  C. 256-bit encryption
  D. 64-bit encryption
  B. 128-bit encryption

• Question 838:

  A certified ethical hacker (CEH) is approached by a friend who believes her husband is cheating. She offers to pay to break into her husband's email account in order to find proof so she can take him to court. What is the ethical response?

  A. Say no; the friend is not the owner of the account.
  B. Say yes; the friend needs help to gather evidence.
  C. Say yes; do the job for free.
  D. Say no; make sure that the friend knows the risk she's asking the CEH to take.
  A. Say no; the friend is not the owner of the account.

• Question 839:

  Tess King is making use of Digest Authentication for her Web site. Why is this considered to be more secure than Basic authentication?

  A. Basic authentication is broken
  B. The password is never sent in clear text over the network
  C. The password sent in clear text over the network is never reused.
  D. It is based on Kerberos authentication protocol
  B. The password is never sent in clear text over the network

• Question 840:

  War dialing is a very old attack and depicted in movies that were made years ago. Why would a modem security tester consider using such an old technique?

  A. It is cool, and if it works in the movies it must work in real life.
  B. It allows circumvention of protection mechanisms by being on the internal network.
  C. It allows circumvention of the company PBX.
  D. A good security tester would not use such a derelict technique.
  B. It allows circumvention of protection mechanisms by being on the internal network.