Mile2 MK0-201 Online Practice Questions and Exam Preparation

Mile2 MK0-201 Online Questions & Answers

• Question 31:

  Which of these methods would be considered examples of active reconnaissance?(Choose three.)

  A. War dialing
  B. Firewalking
  C. Whois lookup
  D. FTP banner retrieval
  A. War dialing
  B. Firewalking
  D. FTP banner retrieval

• Question 32:

  What technologies could a company deploy to protect all data passing from an employees home computer to the corporate intranet?Choose two.

  A. L2TP/Ipsec
  B. PPTP/MPPE
  C. WEP
  D. IKE
  A. L2TP/Ipsec
  B. PPTP/MPPE

• Question 33:

  Keen administrators (the enemy of penetration testers)will take great steps in order to collect logs on different servers.By having a detailed log of activities they may be able to detect abnormal activities.

  A skilled intruder will attempt to modify the logging policy in order to prevent the administrator from having access to his detailed log.What command line tool could an attacker use to disable auditing on a Windows server?

  A. Syslog
  B. Eventlog
  C. Auditpol
  D. Auditlog
  C. Auditpol

• Question 34:

  When referring to database,what would you call the number of rows within a table?

  A. Cardinality
  B. Degree
  C. Domain
  D. Candidate
  A. Cardinality

• Question 35:

  Select the best method of securing the underlying data tables on a database system.

  A. Create service accounts with the correct privileges for the action the user is carrying out, i.e.read only or full control.
  B. Allow only users to connect as the SA account.
  C. Create a service account with full access privilege over the underlying data tables.
  D. Allow only applications to interrogate a mirror of the database.
  A. Create service accounts with the correct privileges for the action the user is carrying out, i.e.read only or full control.

• Question 36:

  Todays security infrastructures are composed of firewall,instrusion detection systems,content screening,certificates,tokens,and a lot more.

  Howeve,there is still one aspect that is considered to be weak link in all infrastructures.

  Which of the following would represent this weak link?

  A. Bad hardware
  B. Bad software
  C. People
  D. Process
  C. People

• Question 37:

  SQL injection is defined as?

  A. The gaining of access to an operating system by injecting code into a system process.
  B. The destruction of databases by mailicious code.
  C. The destruction of databases by malicious code.
  D. Altering data on a victims database server to that of a hackers choice.
  B. The destruction of databases by mailicious code.

• Question 38:

  Why are Trojans such as Beast a lot harder to detect?Choose the best answer.

  A. They use a well known name to hide themselves
  B. They inject themselves into another process
  C. They have a polymorphic payload
  D. They are self garbling and cannot be detected
  B. They inject themselves into another process

• Question 39:

  After completing your reconnaissance and scanning,which of the following would be the next logical step performed bye the Pen Tester?

  A. Vulnerability Assessment
  B. Enumeration
  C. Privilege Escalation
  D. Clean up
  B. Enumeration

• Question 40:

  What is one possible method that hackers can use to sniff SSL connections?Choose the best answer.

  A. Use dsniff
  B. Act as a man in the middle between the client and the webserver and send the client a fake certificate that the user will accept as legitimate
  C. Use SSLSniff to sniff the session key exchange
  D. Use SSL Relay
  B. Act as a man in the middle between the client and the webserver and send the client a fake certificate that the user will accept as legitimate