GAQM CEH-001 Online Practice Questions and Exam Preparation

GAQM CEH-001 Online Questions & Answers

• Question 81:

  What is SYSKEY # of bits used for encryption?

  A. 40
  B. 64
  C. 128
  D. 256
  C. 128

• Question 82:

  If a token and 4-digit personal identification number (PIN) are used to access a computer system and the token performs off-line checking for the correct PIN, what type of attack is possible?

  A. Birthday
  B. Brute force
  C. Man-in-the-middle
  D. Smurf
  B. Brute force

• Question 83:

  SNMP is a protocol used to query hosts, servers, and devices about performance or health status data. This protocol has long been used by hackers to gather great amount of information about remote hosts. Which of the following features makes this possible? (Choose two)

  A. It used TCP as the underlying protocol.
  B. It uses community string that is transmitted in clear text.
  C. It is susceptible to sniffing.
  D. It is used by all network devices on the market.
  B. It uses community string that is transmitted in clear text.
  D. It is used by all network devices on the market.

• Question 84:

  This attack uses social engineering techniques to trick users into accessing a fake Web site and divulging personal information. Attackers send a legitimate- looking e-mail asking users to update their information on the company's Web site, but the URLs in the e-mail actually point to a false Web site.

  A. Wiresharp attack
  B. Switch and bait attack
  C. Phishing attack
  D. Man-in-the-Middle attack
  C. Phishing attack

• Question 85:

  While reviewing the result of scanning run against a target network you come across the following:

  

  Which among the following can be used to get this output?

  A. A Bo2k system query.
  B. nmap protocol scan
  C. A sniffer
  D. An SNMP walk
  D. An SNMP walk

• Question 86:

  Which of the following is an advantage of utilizing security testing methodologies to conduct a security audit?

  A. They provide a repeatable framework.
  B. Anyone can run the command line scripts.
  C. They are available at low cost.
  D. They are subject to government regulation.
  A. They provide a repeatable framework.

• Question 87:

  Nathan is testing some of his network devices. Nathan is using Macof to try and flood the ARP cache of these switches. If these switches' ARP cache is successfully flooded, what will be the result?

  A. The switches will drop into hub mode if the ARP cache is successfully flooded.
  B. If the ARP cache is flooded, the switches will drop into pix mode making it less susceptible to attacks.
  C. Depending on the switch manufacturer, the device will either delete every entry in its ARP cache or reroute packets to the nearest switch.
  D. The switches will route all traffic to the broadcast address created collisions.
  A. The switches will drop into hub mode if the ARP cache is successfully flooded.

• Question 88:

  When an alert rule is matched in a network-based IDS like snort, the IDS does which of the following?

  A. Drops the packet and moves on to the next one
  B. Continues to evaluate the packet until all rules are checked
  C. Stops checking rules, sends an alert, and lets the packet continue
  D. Blocks the connection with the source IP address in the packet
  B. Continues to evaluate the packet until all rules are checked

• Question 89:

  Jim's organization has just completed a major Linux roll out and now all of the organization's systems are running the Linux 2.5 kernel. The roll out expenses has posed constraints on purchasing other essential security equipment and software. The organization requires an option to control network traffic and also perform stateful inspection of traffic going into and out of the DMZ.

  Which built-in functionality of Linux can achieve this?

  A. IP Tables
  B. IP Chains
  C. IP Sniffer
  D. IP ICMP
  A. IP Tables

• Question 90:

  Use the traceroute results shown above to answer the following question:

  

  The perimeter security at targetcorp.com does not permit ICMP TTL-expired packets out.

  A. True
  B. False
  A. True