Mile2 MK0-201 Online Practice Questions and Exam Preparation

Mile2 MK0-201 Online Questions & Answers

• Question 241:

  In symmetric cryptosystem,how many keys are needed to communicate securely between 10 different people who all wish to have a key pair to talk to each other?

  A. 2
  B. 1
  C. 45
  D. 90
  C. 45

• Question 242:

  Which of the following would represent a technique to embed data within another file whereby it would be near impossible for anyone using or looking at the file to claim that there might be a message hidden within the media or the existence of some from of message?

  A. Cryptography
  B. Encryption
  C. Steganography
  D. MimiCry
  C. Steganography

• Question 243:

  Which registry key setting will disable the automatic playing of executables on a CD-room when the CD- room is inserted into the computer?Choose the best answer.

  A. HKEY_Current_User\System\CurrentControlSet\Control\cdrom\autoplay=0
  B. HKEY_Current_Machine\System\CurrentControlSet\Service\cdrom\autorun=0
  C. HKEY_Current_Machine\System\CurrentControlSet\Service\cdrom\auto=1
  D. HKEY_Current_Machine\System\Services\Windows\cdrom\autoplay=0
  B. HKEY_Current_Machine\System\CurrentControlSet\Service\cdrom\autorun=0

• Question 244:

  Using Netcat what would be the syntax to setup a listening back door from a compromised Windows Server that will spawn a shell when connecting to the remote server on port 777?

  A. nc |p 777 e cmd.exe
  B. nc sh p 777 e cmd.exe
  C. nc |p 777 sh cmd.exe
  D. nc |p 777 exec cmd.exe
  A. nc |p 777 e cmd.exe

• Question 245:

  Bob is working as an Instrusion Detection System administrator for a company called CCCure.

  Being a keen analyst he has noted a very large amount of SYN packet being sent to some of his external IP addresses.

  At first it looked like normal daily traffic but somehow it seems that after his internet facing hosts sends a SYN/ACK reply back to the connection request,the final ACK packet is never received from the remote host.

  What type of scan does this pattern indicate?

  A. A FIN Scan
  B. A Vanilla port scan
  C. A Half-Open Scan
  D. A NULL scan
  C. A Half-Open Scan

• Question 246:

  If an attacker gets Adminsitrative-level access, why cant the entries in the Event log be trusted with certainty?Choose two.

  A. Entries in the event log are not digitally signed
  B. The attacker may have been able to simply clear the event log,thus erasing evidence of the methods of break-in
  C. Tools like Winzapper allow the attacker to selectively delete log entries associated with the initial break-in and subsequent malicious activity
  D. Event logs have NTFS permissions of Everyone Full Control and thus can be easily edited.
  B. The attacker may have been able to simply clear the event log,thus erasing evidence of the methods of break-in
  C. Tools like Winzapper allow the attacker to selectively delete log entries associated with the initial break-in and subsequent malicious activity

• Question 247:

  Footprinting is one of the first steps performed by a Penetration Tester.

  Many security testers neglect to perform this phase whereby you have the opportunity to easily information that can later be matched with technical discovery to give you a greater assurance in your finding.

  Which of the following would NOT be doen in the footprinting phase?

  A. Collecting DNS registration information
  B. Finding network IP addresses range in public DB
  C. Maintaining Access
  D. Visiting and querying the Security Exchange Commission database.
  C. Maintaining Access