Mile2 MK0-201 Online Practice Questions and Exam Preparation

Mile2 MK0-201 Online Questions & Answers

• Question 11:

  Which scripting language do most open source vulnerability scanners use?

  A. ASNL (Automated Security Nessus Language)
  B. NASL (Nessus Attack Scripting Language)
  C. SANL (Security Attack Nessus Language)
  D. NASA (Nessus Automated Security Attack)
  B. NASL (Nessus Attack Scripting Language)

• Question 12:

  Why is it often recommended to rename the built-in Administrator account on a Windows 2000 domain? Choose the best answer.

  A. Renaming the Guest account is of little value
  B. If you dont rename the Administrator account you will have NetBIOS name conflicts with the Administrator account from other domains in the forest
  C. Account lockout will not stop password guessing attacks via SMB filesharing or BASIC web authentication against the built-in Administrator account
  D. The default domain policy actually requires the Administrator account to be renamed
  C. Account lockout will not stop password guessing attacks via SMB filesharing or BASIC web authentication against the built-in Administrator account

• Question 13:

  While doing a penetration test you were able to extract a copy of the password database from a Windows server using a vulnerable SQL server that had a blank password.

  You now have a copy of the password file in LAN Manager Format,you notice two accounts that could be very interesting to get into.

  The first account is the administrator account and there is a terminal user account as well.

  It is very likely that the same password might be reused on all hosts for one of these two accounts or both.

  Which of the following tools would you to crack the password the fastest?

  A. L0pthcrack
  B. John the ripper
  C. Rainbowcrack
  D. CainandAbel buit in cracker
  C. Rainbowcrack

• Question 14:

  When conducting a TCP scan for SQL servers on a given network address range,what port is being interrogated?

  A. 1453
  B. 1334
  C. 1433
  D. 1434
  C. 1433

• Question 15:

  Which of the following SQL script will cause the SQL server to cease operations?

  A. NET STOP SQLSERVER
  B. OR 1=1; CLOSE WITHNOWAIT;
  C. NET STOP SQLSERVERAGENT
  D. SHUTDOWN WITH NOWAIT;
  D. SHUTDOWN WITH NOWAIT;

• Question 16:

  Spyware is either hardware or software installed on a computer which gather information about the user for later retrieval by whoever controls the Spyware.

  It is installed without the users knowledge

  What are the two ctegories of Spyware that exist? (Choose two from the list below)

  A. Surveillance
  B. Screen capture
  C. Key loggers
  D. Advertising
  A. Surveillance
  D. Advertising

• Question 17:

  Which of the following is the best method to counteract offline password cracking?Choose the best answer.

  A. Setting a password policy with a maximum age of 30 days
  B. Setting a password policy with a minimum age of 30 days
  C. Setting a password policy with a minimum length of 6 characters
  D. Use of one time passwords
  D. Use of one time passwords

• Question 18:

  Which Vulnerability Assessment tools perform dangerous/destructive scans.Choose two.

  A. MS Baseline Analyzer
  B. Nessus
  C. Snort
  D. X-Scan
  B. Nessus
  D. X-Scan

• Question 19:

  Which of the following countermeasures can make it more difficult for an attacker to gain access to the local SAM file if the attacker has physical access to that computer?Choose two.

  A. Change the BIOS to always boot first from the hard drive and enable a BIOS password
  B. Install a smartcard reader for login
  C. Encrypt the SAM file using EFS
  D. Physically remove the floppy drive and CD/DVD drives
  A. Change the BIOS to always boot first from the hard drive and enable a BIOS password
  D. Physically remove the floppy drive and CD/DVD drives

• Question 20:

  While performing a penetration test you discover that the system being tested is already compromised by an intruder.Further examination shows the intruder being currently on the system and doing his deeds.As a Certified Penetration Testing Specialist What should you do?

  A. Retaliate immediately and attempt to break into the attacker system before you loose track of where he is doing the attack from.
  B. Suspend your test immediately and advise your client.Once the client gives you authorization you would resume your testing.
  C. Immediately attempt to gather as much information as possible about the intruder,monitor his moves very closely but never attempt to break into this system or retaliate.
  D. Call 911 immediately and then call management to notify them of your promptaction.Once management gives you authorization you can resume your testing.
  B. Suspend your test immediately and advise your client.Once the client gives you authorization you would resume your testing.