Mile2 MK0-201 Online Practice Questions and Exam Preparation

Mile2 MK0-201 Online Questions & Answers

• Question 221:

  Which of the following password and encryption cracking methods is guaranteed to successfully crack any password or encryption algorithm?

  A. Dictionary
  B. Hybrid
  C. Brute Force
  D. RainbowCrack
  B. Hybrid

• Question 222:

  One of the last steps taken by an attacker will be to configure permanent access to a compromised system.

  However, the installation of a backdoor, installation of new processes,and changes to key files could be very quickly detected by an administrator.

  What tool would assist the attacker in preventing the administrator from detecting changes to files,new processes that are running,or other signs that the system might have been compromised?

  A. A Trojan horse
  B. A Rootkit
  C. A Backdoor
  D. A privilege escalation tool
  B. A Rootkit

• Question 223:

  Joshua, a specialist in Penetration Testing,has been hired by TestKing.com to perform a security test on some of their servers.Joshua has been challenged to remain undetected by TestKing.com internal security team.

  Over the past few days Joshua has been collecting tons of information about his target.He did so by accessing public database and never sending any packets to his target.How would you call this type of information gathering?

  A. Active Information Gathering
  B. Passive Information Gathering
  C. Stealth Information Gathering
  D. Secret Information Gathering
  B. Passive Information Gathering

• Question 224:

  Bob is using a new sniffer called Ethereal.

  However,it seems that Bob can only see packets that are sent from and to his own network interface card (NIC).He cannot see any traffic from the other station.

  What could be the cause of Bobs problem?(Select two)

  A. The NIC is not in promiscuous mode
  B. The network is using UDP traffic
  C. Bob is connected to a switched network
  D. The sniffer does not support Bobs TCP/IP network stack
  A. The NIC is not in promiscuous mode
  B. The network is using UDP traffic

• Question 225:

  Which of the following is the most effective way to reduce the threat of social engineering?Choose the best answer.

  A. Require employees to sign a computer usage policy
  B. Prevent employees from going to happy hour
  C. Require employees to communicate only face-to-face
  D. Extensive user education on the nature of social engineering
  D. Extensive user education on the nature of social engineering

• Question 226:

  To prevent the storage of hashes in LANMAN format in either the local SAM file or in Active Dierctory for computers running Windows 2000 SP2 or later,which of the following registry settings should be applied? Choose the best answer.

  A. NoLMSam=1
  B. NoLMSam=0
  C. NoLMHash=1
  D. NoLMHash=0
  C. NoLMHash=1

• Question 227:

  When a company wishes to have some asurance that a product is working as per the vendor claim they usually seek certification.One of the most commonly used certification schemes today is called Common Criteria (CC).Which of the following terms describe a product that is to be evaluated under the Common Criteria to see how well the product meets the claims made by the vendor?

  A. Security Target
  B. Target of evaluation
  C. Protection Profile
  D. EAL4
  B. Target of evaluation

• Question 228:

  Which of the following is NOT a tool that could be used to perform a zone transfer?

  A. DIG
  B. Host
  C. Nslookup
  D. WHOIS
  D. WHOIS

• Question 229:

  The nbstat tool is used to query the NetBIOS name table from a remote Windows system.The table below shows a sample output of the tool.

  The second column is a two digit hexadecimal number that identiifies what the services and entities on the specific machine are.

  If you look at line number 3 (in bold below),what does the 20 indiate?

  A. The server service is running.
  B. The RAS Client service is running.
  C. The messenger service is running.
  D. The workstation service is running
  A. The server service is running.

• Question 230:

  This document is a high level document that describes management intentions towards security.What is the name of the document?

  A. Procedures
  B. Guidelines
  C. Policies
  D. Baselines
  C. Policies