Mile2 MK0-201 Online Practice Questions and Exam Preparation

Mile2 MK0-201 Online Questions & Answers

• Question 81:

  Which tool speeds up offline password cracking by precomputing tables of password hashes?Choose the best answer.

  A. John the Ripper
  B. Xcrack
  C. Rainbow Crack
  D. Cisilia
  C. Rainbow Crack

• Question 82:

  You have successfully exploited a remote computer.You now have limited privilege on the remote computer.

  You tests have revealed that it is possible to download files from the internet but the size of the limited to less than 60K.

  You would like to escalate your privilege by scanning the internal network and also setup a permanent backdoor that would allow you to return to the compromised host at will.

  Which of the following tools could be used for such purpose?

  A. Hijack This
  B. Netcat
  C. ButtSniff
  D. BackOrifice
  B. Netcat

• Question 83:

  What technology can be deployed at the network layer to protect against sniffing?Choose the best answer.

  A. SSL
  B. Certificates
  C. IPSec
  D. DAI
  C. IPSec

• Question 84:

  Which of these methods would be considered examples of active reconnaissance? (Choose three.)

  A. Ware dialing
  B. Firewalking
  C. Whois lookup
  D. FTP banner retrieval
  A. Ware dialing
  B. Firewalking
  D. FTP banner retrieval

• Question 85:

  To block tunneling remote access trojans like 007Shell,what should you do on your firewall?Choose the best answer.

  A. Block all IGMP
  B. Block UDP port 1900
  C. Block all ICMP
  D. Block TCP port 27374
  C. Block all ICMP

• Question 86:

  Which of the following methods would allow an attacker to get access to the local SAM file if the attacker had physical access? Choose three.

  A. Reboot with a Linu-based floppy or CD that can read NTFS filesystems
  B. Reboot with NTFSDOS floppy and copy the SAM file
  C. Physically remove the hard drive and install it as a second drive in another Windows computer
  D. Rebooting into Windows using Safe Mode.
  A. Reboot with a Linu-based floppy or CD that can read NTFS filesystems
  B. Reboot with NTFSDOS floppy and copy the SAM file
  C. Physically remove the hard drive and install it as a second drive in another Windows computer

• Question 87:

  Which of the following statements explain why hardware-based keystroke loggers are so dangerous? Choose three.

  A. They are expensive.
  B. They can be installed or removed in seconds.
  C. They are totally transparent to both the operating system and the user applications
  D. Neither system administrator nor users routinely inspect the back of their PCs for suspicious devices
  B. They can be installed or removed in seconds.
  C. They are totally transparent to both the operating system and the user applications
  D. Neither system administrator nor users routinely inspect the back of their PCs for suspicious devices

• Question 88:

  Looking at the graphic presented below,what version of Internet Protocol was used on the network where this packet was sent?Extract the information from the Hex dump below.

  A. IP Version 4
  B. IP Version 6
  C. IP Version 4.5
  D. IP Version 45
  A. IP Version 4

• Question 89:

  Which of the following techniques would be effective to get around some of the blocking rules on certain firewalls? The same technique could be used to avoid detection by intrusion Detection Systems (IDS) in some cases.

  A. Injection
  B. Spoofing
  C. Fragmentation
  D. Diffusion
  C. Fragmentation

• Question 90:

  Which tools and or techniques can be used to remove an Alternative Data Stream on an NTFS file? Choose two.

  A. Ads_cat
  B. ADSChecker
  C. ADS_Del
  D. Copy the NTFS file containing the stream to a FAT partition,delete the original TFS file,copy the FAT file back to NTFS
  D. Copy the NTFS file containing the stream to a FAT partition,delete the original TFS file,copy the FAT file back to NTFS