Mile2 MK0-201 Online Practice Questions and Exam Preparation

Mile2 MK0-201 Online Questions & Answers

• Question 91:

  Session Hijacking is possible due to which weakness within the TCPIP stack implementation?

  A. Initial Sequence Number prediction
  B. Flags are not validated properly,it is possible to set all flags to 1 or 0.
  C. Validation of the size of a packet after reassembly is not implemented properly.
  D. Initial Sequence Number are too low
  A. Initial Sequence Number prediction

• Question 92:

  Keystroke loggers can be found in which of the following forms?Choose all that apply.

  A. Trojans
  B. Spyware
  C. Text files
  D. A dynamic link library file which replaces the standard GINA.dII
  A. Trojans
  B. Spyware
  D. A dynamic link library file which replaces the standard GINA.dII

• Question 93:

  Which of the following might be used to give false positives when a UDP scan is being performed against a DMZ server running DNS? Choose the best answer.

  A. On the firewall,block ICMP TTL Exceeded
  B. On the firewall,block all incoming UDP
  C. On the firewall,block all TCP SYN packets
  D. On the firewall,block all ICMP Port Unreachable messages
  D. On the firewall,block all ICMP Port Unreachable messages

• Question 94:

  What is traceroute used for?

  A. To find gateways that are vulnerable to ICMP based attacks
  B. To find the best path to a destination address
  C. To find the path a packet traveled to get to the destination address
  D. To find the initial TTL (Time to live) value used within a packet
  C. To find the path a packet traveled to get to the destination address

• Question 95:

  Why is tunneling-based trojan software so useful for hackers if it is installed inside a corporate network? Choose the best answer.

  A. Tunneling software uses ports that are not well knwon,eg.12345
  B. Stateful inspection firewalls can only filter Server ports of 1-1023
  C. It makes network penetration trivial the tunneling occurs using Whatever port(s) the firewall is configured to allow
  D. Anti-trojan software do not have signatures for tunneling trojans,therefore it is easy to have end- users install tunneling trojans.
  C. It makes network penetration trivial the tunneling occurs using Whatever port(s) the firewall is configured to allow

• Question 96:

  Doing Operating System identification remotely is an art that requires analysis of responses from packets being sent.In order to do so efficiently,a methodology called fuzzy logic is often used. Which of the following would best describe what fuzzy logic is?

  A. A problem solving control system
  B. A special type of port scan
  C. An operating system feature
  D. A hardware device for OS identification
  A. A problem solving control system

• Question 97:

  You have been asked to assist an investigation team in collecting data and evidence related to an internal hacking case.

  The investigator in charge of the case would like to capture all keystrokes from the suspect but is afraid the employee under investigation who possesses great technical skills might have installed integrity tools on his system that would detect

  any new software installed.

  What solution would be best to use to reach the investigator requirement?

  A. Disable the integrity tools in place
  B. Install a software key logger that does not show in the process list
  C. Install a hardware based key logger
  D. Sniff all traffic and keystrokes from the network
  C. Install a hardware based key logger

• Question 98:

  Which of the following password and encyption cracking methods is guaranteed to successfully crack any password or encryption algorithm?

  A. Dictionary
  B. Hybrid
  C. Brute Force
  D. RainbowCrack
  B. Hybrid

• Question 99:

  Which scripting language do most open source vulnerability scanners use?

  A. ASNL (Automated Security Nessus Language)
  B. NASL (Nessus Attack Scripting Language)
  C. SANL (Security Attack Nessus Language)
  D. NASA (Nessus Automated Security Attack)
  B. NASL (Nessus Attack Scripting Language)

• Question 100:

  Which of the following capabilities do rootkits have?Choose all that apply.

  A. Hide any file
  B. Hide any process
  C. Hide any listening port
  D. Cause a blue screen of death on Windows computers
  A. Hide any file
  B. Hide any process
  C. Hide any listening port
  D. Cause a blue screen of death on Windows computers