CPEH-001 Exam Questions
1,043 real CPEH-001 exam questions with expert-verified answers and explanations. Page 14 of 21.
- Question #654
Based on the following extract from the log of a compromised machine, what is the hacker really trying to steal? c:\> cmd /c type c:\winnt\repair\sam > c:\har.txt Volume in drive C...
- Question #655
As a securing consultant, what are some of the things you would recommend to a company to ensure DNS security? Select the best answers.
- Question #656
Why would you consider sending an email to an address that you know does not exist within the company you are performing a Penetration Test for?
- Question #657
What tool can crack Windows SMB passwords simply by listening to network traffic? Select the best answer.
- Question #658
A network admin contacts you. He is concerned that ARP spoofing or poisoning might occur on his network. What are some things he can do to prevent it? Select the best answers.
- Question #659
Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network. Which of these tools would do the SNMP enum...
- Question #660
If a token and 4-digit personal identification number (PIN) are used to access a computer system and the token performs off-line checking for the correct PIN, what type of attack i...
- Question #661
Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm througho...
- Question #662
Study the snort rule given below: From the options below, choose the exploit against which this rule applies.
- Question #663
Which of the following algorithms can be used to guarantee the integrity of messages being sent, in transit, or stored? (Choose the best answer)
- Question #664
A user on your Windows 2000 network has discovered that he can use L0phtcrack to sniff the SMB exchanges which carry user logons. The user is plugged into a hub with 23 other syste...
- Question #665
You are attempting to crack LM Manager hashed from Windows 2000 SAM file. You will be using LM Brute force hacking tool for decryption. What encryption algorithm will you be decryp...
- Question #666
In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtC...
- Question #667
What is the algorithm used by LM for Windows2000 SAM?
- Question #668
E-mail scams and mail fraud are regulated by which of the following?
- Question #669
Which of the following LM hashes represent a password of less than 8 characters? (Select 2)
- Question #670
Which of the following is the primary objective of a rootkit?
- Question #671
This kind of password cracking method uses word lists in combination with numbers and special characters:
- Question #672
_________ is a tool that can hide processes from the process list, can hide files, registry entries, and intercept keystrokes.
- Question #673
What is the BEST alternative if you discover that a rootkit has been installed on one of your computers?
- Question #674
What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stracheldraht have in common?
- Question #675
How can you determine if an LM hash you extracted contains a password that is less than 8 characters long?
- Question #676
When discussing passwords, what is considered a brute force attack?
- Question #677
Which of the following are well know password-cracking programs?(Choose all that apply.
- Question #678
Password cracking programs reverse the hashing process to recover passwords.(True/False.)
- Question #679
You have retrieved the raw hash values from a Windows 2000 Domain Controller. Using social engineering, you come to know that they are enforcing strong passwords. You understand th...
- Question #680
An attacker runs netcat tool to transfer a secret file between two hosts. Machine A: netcat -l -p 1234 < secretfile Machine B: netcat 192.168.3.4 > 1234 He is worried about informa...
- Question #682
ViruXine.W32 virus hides their presence by changing the underlying executable code. This Virus code mutates while keeping the original algorithm intact, the code changes itself eac...
- Question #683
"Testing the network using the same methodologies and tools employed by attackers" Identify the correct terminology that defines the above statement.
- Question #684
Nathan is testing some of his network devices. Nathan is using Macof to try and flood the ARP cache of these switches. If these switches' ARP cache is successfully flooded, what wi...
- Question #685
You are programming a buffer overflow exploit and you want to create a NOP sled of 200 bytes in the program exploit.c What is the hexadecimal value of NOP instruction?
- Question #686
In Trojan terminology, what is a covert channel?
- Question #687
When a normal TCP connection starts, a destination host receives a SYN (synchronize/start) packet from a source host and sends back a SYN/ACK (synchronize acknowledge). The destina...
- Question #688
Yancey is a network security administrator for a large electric company. This company provides power for over 100, 000 people in Las Vegas. Yancey has worked for his company for ov...
- Question #689
You receive an e-mail like the one shown below. When you click on the link contained in the mail, you are redirected to a website seeking you to download free Anti-Virus software....
- Question #690
Every company needs a formal written document which spells out to employees precisely what they are allowed to use the company's systems for, what is prohibited, and what will happ...
- Question #691
Take a look at the following attack on a Web Server using obstructed URL: How would you protect from these attacks?
- Question #692
Which type of sniffing technique is generally referred as MiTM attack?
- Question #693
Switches maintain a CAM Table that maps individual MAC addresses on the network to physical ports on the switch. In MAC flooding attack, a switch is fed with many Ethernet frames,...
- Question #694
You went to great lengths to install all the necessary technologies to prevent hacking attacks, such as expensive firewalls, antivirus software, anti-spam systems and intrusion det...
- Question #695
How does a denial-of-service attack work?
- Question #696
You are trying to break into a highly classified top-secret mainframe computer with highest security system in place at Merclyn Barley Bank located in Los Angeles. You know that co...
- Question #697
This is an attack that takes advantage of a web site vulnerability in which the site displays content that includes un-sanitized user-provided data. What is this attack?
- Question #698
Trinity needs to scan all hosts on a /16 network for TCP port 445 only. What is the fastest way she can accomplish this with Nmap? Stealth is not a concern.
- Question #699
It is a short-range wireless communication technology intended to replace the cables connecting portable of fixed devices while maintaining high levels of security. It allows mobil...
- Question #700
Which of the following can the administrator do to verify that a tape backup can be recovered in its entirety?
- Question #701
A company's security policy states that all Web browsers must automatically delete their HTTP browser cookies upon terminating. What sort of security breach is this policy attempti...
- Question #702
To maintain compliance with regulatory requirements, a security audit of the systems on a network must be performed to determine their compliance with security policies. Which one...
- Question #703
You are tasked to perform a penetration test. While you are performing information gathering, you find an employee list in Google. You find the receptionist's email, and you send h...
- Question #704
Your team has won a contract to infiltrate an organization. The company wants to have the attack be as realistic as possible; therefore, they did not provide any information beside...