Mile2 MK0-201 Online Practice Questions and Exam Preparation

Mile2 MK0-201 Online Questions & Answers

• Question 201:

  Automated tools are not always adept at identifying remote applications.By inspecting banners presented when connecting to a specific port,it is possible to gather more information.Considering the graphic below,what type of web server is running on the remot server that you attempted to connect to?

  A. IIS 4.0
  B. IIS 5.0
  C. Netscape Enterprise
  D. Apache
  D. Apache

• Question 202:

  DNS Spoofing can allow an attacker to sniff traffic that is meant to go to particular web sites.Which of the following tools can perform DNS Spoofing?Choose two.

  A. Cain and Abel
  B. LC5
  C. WinDNSSpoof
  D. URLSnarf
  A. Cain and Abel
  C. WinDNSSpoof

• Question 203:

  Given the following diagram,what ports shouldbe blocked on the perimeter and internal firewall to best protect the Microsoft SQL databae server from unauthorized inbound connections?

  A. 1433, 1434
  B. 443, 434
  C. 1443,1444
  D. 80,139
  A. 1433, 1434

• Question 204:

  There are multiples ways that passwords could be cracked. Which of the following is not a password cracking method?

  A. Salami
  B. Brute Force
  C. Dictionary
  D. Hybrid
  E. Pre-Computed Hashes
  A. Salami

• Question 205:

  Which of the following items is the least likely to be found while doing Scanning?Choose the best answer.

  A. IP addresses
  B. Operating System
  C. System Owner
  D. Services
  C. System Owner

• Question 206:

  Which of these methods would help protect DNS records from unauthorized users?(Choose two.)

  A. Removing the default setting on NT 4 and Windows 2000 DNS servers that allows zone transfers to any IP address
  B. Using Active Directory Integrated zones on publicly-available DNS servers
  C. Blocking incoming UDP port 53 requests to a DMZ hosting a DNS server
  D. Using two DNS servers;An internal DNS server with internal resource records and an external DNS server with DMZ-based resource records
  A. Removing the default setting on NT 4 and Windows 2000 DNS servers that allows zone transfers to any IP address
  D. Using two DNS servers;An internal DNS server with internal resource records and an external DNS server with DMZ-based resource records

• Question 207:

  Bob has just produced a very detailed penetration testing report for his client.Bob wishes to ensure that the report will not be changed in storage or in transit.What would be the best tool that Bob can use to assure the integrity of the information and detect any changeds that could have happend to the report while being transmitted or stored?

  A. A Symmetric Encryption Algorithm
  B. An Asymmetric Encryption Algorithm
  C. An Hashing Algorithm
  D. The ModDetect Algorithm
  C. An Hashing Algorithm

• Question 208:

  Which of the following resource records would you inspect to find out how long a cache poisoning attack might be effective against a remote DNS server?

  A. MX
  B. NS
  C. SOA
  D. PTR
  C. SOA

• Question 209:

  Under the Windows platform,there is something refered to as Null Session.

  Which of the following statements would best describe what a null session consists of?

  A. It is a session where zero bytes of traffic have been transferred
  B. It is a session where erroneous commands are being used showing the lack of knowledge of the user connected.
  C. It is a remote session that is established anonymously to a Windows machine.
  D. It is a anonymous FTP session under the Windows platform
  C. It is a remote session that is established anonymously to a Windows machine.

• Question 210:

  Wayne,who has a twisted mind,has been watching security mailing lists very closely.Today he has seen a new vulnerability announcement that affects multiple mail servers.Jack wishes to scan the internet for servers that are running one of those vulnerable mail servers.His intent is to do this passively at first by doing DNS queries using the nslookup command.

  What type of resource record is Wayne looking for within the DNS query results?

  A. Only A resource record
  B. Only PTR records
  C. Only MX records
  D. Only CNAME records
  C. Only MX records