New Year Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free GAQM CEH-001 Practice Exam with Questions & Answers | Set: 13

Questions 241

Pentest results indicate that voice over IP traffic is traversing a network. Which of the following tools will decode a packet capture and extract the voice conversations?

Options:
A.

Cain

B.

John the Ripper

C.

Nikto

D.

Hping

GAQM CEH-001 Premium Access
Questions 242

A Certificate Authority (CA) generates a key pair that will be used for encryption and decryption of email. The integrity of the encrypted email is dependent on the security of which of the following?

Options:
A.

Public key

B.

Private key

C.

Modulus length

D.

Email server certificate

Questions 243

In the OSI model, where does PPTP encryption take place?

Options:
A.

Transport layer

B.

Application layer

C.

Data link layer

D.

Network layer

Questions 244

An NMAP scan of a server shows port 25 is open. What risk could this pose?

Options:
A.

Open printer sharing

B.

Web portal data leak

C.

Clear text authentication

D.

Active mail relay

Questions 245

A technician is resolving an issue where a computer is unable to connect to the Internet using a wireless access point. The computer is able to transfer files locally to other machines, but cannot successfully reach the Internet. When the technician examines the IP address and default gateway they are both on the 192.168.1.0/24. Which of the following has occurred?

Options:
A.

The gateway is not routing to a public IP address.

B.

The computer is using an invalid IP address.

C.

The gateway and the computer are not on the same network.

D.

The computer is not using a private IP address.

Questions 246

Which of the following programming languages is most vulnerable to buffer overflow attacks?

Options:
A.

Perl

B.

C++

C.

Python

D.

Java

Questions 247

Which of the following techniques will identify if computer files have been changed?

Options:
A.

Network sniffing

B.

Permission sets

C.

Integrity checking hashes

D.

Firewall alerts

Questions 248

A company has publicly hosted web applications and an internal Intranet protected by a firewall. Which technique will help protect against enumeration?

Options:
A.

Reject all invalid email received via SMTP.

B.

Allow full DNS zone transfers.

C.

Remove A records for internal hosts.

D.

Enable null session pipes.

Questions 249

Information gathered from social networking websites such as Facebook, Twitter and LinkedIn can be used to launch which of the following types of attacks? (Choose two.)

Options:
A.

Smurf attack

B.

Social engineering attack

C.

SQL injection attack

D.

Phishing attack

E.

Fraggle attack

F.

Distributed denial of service attack

Questions 250

Which of the following network attacks takes advantage of weaknesses in the fragment reassembly functionality of the TCP/IP protocol stack?

Options:
A.

Teardrop

B.

SYN flood

C.

Smurf attack

D.

Ping of death

Questions 251

What is the main advantage that a network-based IDS/IPS system has over a host-based solution?

Options:
A.

They do not use host system resources.

B.

They are placed at the boundary, allowing them to inspect all traffic.

C.

They are easier to install and configure.

D.

They will not interfere with user interfaces.

Questions 252

Which security control role does encryption meet?

Options:
A.

Preventative

B.

Detective

C.

Offensive

D.

Defensive

Questions 253

When setting up a wireless network, an administrator enters a pre-shared key for security. Which of the following is true?

Options:
A.

The key entered is a symmetric key used to encrypt the wireless data.

B.

The key entered is a hash that is used to prove the integrity of the wireless data.

C.

The key entered is based on the Diffie-Hellman method.

D.

The key is an RSA key used to encrypt the wireless data.

Questions 254

Which of the following is a preventive control?

Options:
A.

Smart card authentication

B.

Security policy

C.

Audit trail

D.

Continuity of operations plan

Questions 255

An organization hires a tester to do a wireless penetration test. Previous reports indicate that the last test did not contain management or control packets in the submitted traces. Which of the following is the most likely reason for lack of management or control packets?

Options:
A.

The wireless card was not turned on.

B.

The wrong network card drivers were in use by Wireshark.

C.

On Linux and Mac OS X, only 802.11 headers are received in promiscuous mode.

D.

Certain operating systems and adapters do not collect the management or control packets.

Questions 256

What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

Options:
A.

Blue Book

B.

ISO 26029

C.

Common Criteria

D.

The Wassenaar Agreement

Questions 257

Which property ensures that a hash function will not produce the same hashed value for two different messages?

Options:
A.

Collision resistance

B.

Bit length

C.

Key strength

D.

Entropy

Questions 258

A tester has been hired to do a web application security test. The tester notices that the site is dynamic and must make use of a back end database.

In order for the tester to see if SQL injection is possible, what is the first character that the tester should use to attempt breaking a valid SQL request?

Options:
A.

Semicolon

B.

Single quote

C.

Exclamation mark

D.

Double quote

Questions 259

WPA2 uses AES for wireless data encryption at which of the following encryption levels?

Options:
A.

64 bit and CCMP

B.

128 bit and CRC

C.

128 bit and CCMP

D.

128 bit and TKIP

Questions 260

Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results? TCP port 21 – no response TCP port 22 – no response TCP port 23 – Time-to-live exceeded

Options:
A.

The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host.

B.

The lack of response from ports 21 and 22 indicate that those services are not running on the destination server.

C.

The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.

D.

The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error.