Free MK0-201 Exam Dumps Preview

Nathalie,an employee of Corporation XYZ, has notice that Bob,one of her coworkers,has been abusing company assets and resources for his own personal gain.

According to good ethics values,what should Nathalie do in this case?

Having just downloaded a new version of Cain & Abel,you wish to monitor your network for clear text passwords being sent.

Knowing you are currently connected to a switch you will attempt to perform an ARP poisoning attack that will let you look at all the packets and not only packets sent to your own machine.

What would you call this type of sniffing?

This technique consists of using social to trick someone into revealing information they should not usually release to unathorized users.

What do we call this technique or type of attack?

Which tools and or techniques can be used to remove an Alternative Data Stream on an NTFS file? Choose two.

There is a method which allows you to find information on hosts located behind a firewall by using packets similar to the packets used by Traceroute.

This method attempts to find out what are the rules in place on the gateway.

What is the name of this method?

Why are SYN port scans not as stealthy as what they originally were several years ago?Choose two.

Which of the following ports are used by the Simple Network Management Protocol? (Choose two)

Which of the following would best represent the definition of a Penetration Test?

Why is it often recommended to rename the built-in Administrator account on a Windows 2000 domain?
Choose the best answer.

Which Vulnerability Assessment tools perform dangerous/destructive scans.Choose two.

From the items listed below,which would be expected from a cracker or hacker but NOT from an Ethical Hacker or Certified Penetration tester?

What are some of the weaknesses that make LAN Manager Hashes much easier to crack by an attacker? (Select all that apply)

An attacker is sending packets with no flag set.This is also known as doing a NULL scan.Usually,operating system networking stacks will respond with a RST packe,however,some operating systems do not conform to this behavior and respond in appropriately.

Such behavior could allow for the identification of the remote OS being used.Which of the following would be one of the Operating systems that responds differently?

Which of the following would best describe a scanning technique that is the most reliable but also the most noticeable on the target is being evaluated?

Which of the following resource records would you inspect to find out how long a cache poisoning attack might be effective against a remote DNS server?

Looking at the graphic below,determine what web site was visited by the user located at IP address 192.168.1.104?

Under the Windows platform,there is something refered to as Null Session.

Which of the following statements would best describe what a null session consists of?

Bryce, who is a great security professional with a perfect track record,has just been called into his supervisor's office.

His supervisor has the sad task of letting him know that hes the next position being cut in their downsizing effort.Bryce has been known to be a mellow type of person but the version of being unemployed after working for 25 years at the same company is just a bit too much for him.He cannot understand why newer employees with only a few years of experience have not been fired before him and why he is the one that must leave.Bryce tells himself that is employer is going to pay dearly for this and hes planning to use his skills to cause disruption within the company infrastructure.

Which of the following term would best describe the reaction of Bryce?

When talking about databases search query languages,commands such as Select,Update,Insert,Grant,and Revoke would all the part of what language?

Bob is working as an Instrusion Detection System administrator for a company called CCCure.

Being a keen analyst he has noted a very large amount of SYN packet being sent to some of his external
IP addresses.

At first it looked like normal daily traffic but somehow it seems that after his internet facing hosts sends a SYN/ACK reply back to the connection request,the final ACK packet is never received from the remote host.

What type of scan does this pattern indicate?

When referring to database,what would you call the number of rows within a table?

The SNMP protocol makes use of community sring to control access.There are two community strings
being used; each of these strings allow you to perform only specific functions within the system being
managed by SNMP.which of the following would represent the functions allowed by the two strings?
Choose two)

How does a system administrator prevent Idp.exe and user2sid.exe tools from retrieving domain usernames,SIDs,and other information from a Windows 2000 Domain Controller if no username and password are supplied?Choose two.

DNS Spoofing can allow an attacker to sniff traffic that is meant to go to particular web sites.

Which of the following tools can perform DNS Spoofing?Choose two.

Password attack fall within two main categories:Social Attacks and Digital Attacks.

Which of the following would not be considered a Social Attack on passwords?

Which of these methods would be considered examples of active reconnaissance?(Choose three.)

Clement is someone who greatly enjoys fishing.

Clement recently visited a web site that is very proactive in its attempt to save marine life.

While on the site he downloaded a disobedience kit where his free CPU cycle can help contribute to the noble cause of saving the rainbow trout from extinction.

Which of the following terms best describes Clementss activity?

Which of the following statements would be TRUE when referring to Stream cliphers?

This document is a high level document that describes management intentions towards security.

What is the name of the document?

Name Servers are the Penetration Testers best friend.The Domain Name Registration database contains information about who registered a particular domain.What common command line as well as web based tool could be used to extract this information from the public database of Domain Name registration.

When referring to databases,what would you call the number of rows within a table?

What software can alert an administrator to modified files (system or otherwise) by comparing new the hash to the hash on the original trusted file?Choose all that apply.NOTE:The term Choose all that apply in this and additional questions does not necessarily mean that there is more than one answer.

Why are SYN port scans not as stealthy as what they originally were several years ago?Choose two.

As you have learned in your Penetration Testing training or field experience,WEP is the encryption that was used with early WLAN implementation.it uses a stream cipher called RC4 to produce a string of bith that will be exclusive OR or XOR with the plain text to form the cliphertext.Which of the following statements represents the rules associated with XOR binary mathematics or comparison? Choose the best answer.

What Windows techonology should prevent SMB Relay from sniffing user credentials in a man in the middle attack?Choose the best answer.

Nmap is the leading port scanner for security testing and penetration testing.

As a tester it is a must have within your toolbox and you MUST be familiar with its basic syntax.

Which of the following command lines would represent a Ping Sweep being performed using Nmap.

One of the challenges when doing large scale security tests is the time required.

If you have to scan a class B network it might take you a very long time. Scanrand is a tool that has been optimized to scan a large number of hosts in very little time.It was reported that it was used to scan about 8300 web servers in less than 4 seconds.

How does scanrand achieve such an impressive benchmark?

Which of the following would best describe the meaning of steganography?