Mile2 MK0-201 Online Practice Questions and Exam Preparation

Mile2 MK0-201 Online Questions & Answers

• Question 101:

  What program can locate computers running sniffers by sending out special ARP packets that only network cards in promiscuous mode will reply to?Choose the best answer.

  A. ARPwatch
  B. Cain and Abel
  C. Macof
  D. Microsoft Network Monitor
  D. Microsoft Network Monitor

• Question 102:

  Which of the following would best describe a scanning technique that is the most reliable but also the most noticeable on the target is being evaluated?

  A. Half-Scan
  B. TCP Connect( )
  C. Fin Scan
  D. NMAP scan
  B. TCP Connect( )

• Question 103:

  The Advanced Encryption Standard (AES) was released to protect sensitive data used by

  A. S.Government organizations. Up to what classification level was AES built for?
  B. Up to Top Secret
  C. Up to Secret
  D. Up to Confidential
  E. Unclassified Information Only
  D. Up to Confidential

• Question 104:

  Which of the following SQL scripts will discover the usernames and hashed passwords from a MSSQL server?

  A. SELECT *FROM*
  B. SELECT name,password FROM master..login UNION ALL SELECT *FROM database.log
  C. SELECT name,password FROM master..sysxlogins
  D. SELECT uname AND passwd FROM master
  C. SELECT name,password FROM master..sysxlogins

• Question 105:

  Which of the following SQL injection scripts would attempt to discover all usernames on the table users beginning with Ad?

  A. SELECT *FROM* WHERE username =AD*
  B. OR 1=1; SELECT username FROM users WHERE username LIKE ad%:
  C. SELECT name FROM Master..sysxlogins
  D. OR 1=2 WHERE name is like AD%
  B. OR 1=1; SELECT username FROM users WHERE username LIKE ad%:

• Question 106:

  You have been hired by company WXY to perform a Penetration Test,in this first phase of your test you have been challenged to remain totally stealthy. Which of the following reconnaissance types would best be used in such a scenario?

  A. Active
  B. Passive
  C. Intrusive
  D. Allusive
  B. Passive

• Question 107:

  Which of the following statements would be TRUE when referring to Stream cliphers?

  A. Stream Ciphers encrypt one digit at a time
  B. Stream Ciphers divide the plaintext message into fixed group of bit and then encrpt these group of bits
  C. Stream Ciphers are NOT very commonly used
  D. Stream Ciphers can be implemented only in software
  A. Stream Ciphers encrypt one digit at a time

• Question 108:

  Name Servers are the Penetration Testers best friend.The Domain Name Registration database contains information about who registered a particular domain.What common command line as well as web based tool could be used to extract this information from the public database of Domain Name registration.

  A. Whois
  B. traceroute
  C. SOA Query tool
  D. Resolv
  A. Whois

• Question 109:

  As you have learned in your Penetration Testing training or field experience,WEP is the encryption that was used with early WLAN implementation.it uses a stream cipher called RC4 to produce a string of bith that will be exclusive OR or XOR with the plain text to form the cliphertext.Which of the following statements represents the rules associated with XOR binary mathematics or comparison? Choose the best answer.

  A. If both bits are different the result will be one,if both bits are the same the result will be a zero.
  B. If both bits are different the result will be zero,if both bits are the same the result will be a one.
  C. Only when both bits have a value of one,will the result be one.
  D. Only when both bits have a value of zero,will the result be one.
  A. If both bits are different the result will be one,if both bits are the same the result will be a zero.

• Question 110:

  Which of the following countermeasures could be taken to implement security through obscurity and thus limit reconnaissance if an attacker issues this command against a web server? Choose the best answer.

  nc www.domain.com 80

  GET HEAD HTTP/1.1

  [return]

  [return]

  A. Change the default error messages
  B. Change the webservers banner
  C. Enable SYN flood protection on a capable firewall
  D. Change the default homepage
  B. Change the webservers banner