CPEH-001 Exam Questions
1,043 real CPEH-001 exam questions with expert-verified answers and explanations. Page 5 of 21.
- Question #204
You want to analyze packets on your wireless network. Which program would you use?
- Question #205
Jimmy is standing outside a secure entrance to a facility. He is pretending to have a tense conversation on his cell phone as an authorized employee badges in. Jimmy, while still o...
- Question #206
What is the most secure way to mitigate the theft of corporate information from a laptop that was left in a hotel room?
- Question #207
In both pharming and phishing attacks an attacker can create websites that look similar to legitimate sites with the intent of collecting personal identifiable information from its...
- Question #208
What is the role of test automation in security testing?
- Question #209
A hacker has successfully infected an internet-facing server which he will then use to send junk mail, take part in coordinated attacks, or host junk email content. Which sort of t...
- Question #210
In order to have an anonymous Internet surf, which of the following is best choice?
- Question #211
In which phase of the ethical hacking process can Google hacking be employed? This is a technique that involves manipulating a search string with specific operators to search for v...
- Question #212
Todd has been asked by the security officer to purchase a counter-based authentication system. Which of the following best describes this type of system?
- Question #213
How can rainbow tables be defeated?
- Question #214
The network in ABC company is using the network address 192.168.1.64 with mask 255.255.255.192. In the network the servers are in the addresses 192.168.1.122, 192.168.1.123 and 192...
- Question #215
In many states sending spam is illegal. Thus, the spammers have techniques to try and ensure that no one knows they sent the spam out to thousands of users at a time. Which of the...
- Question #216
Emil uses nmap to scan two hosts using this command: nmap -sS -T4 -O 192.168.99.1 192.168.99.7 He receives this output: What is his conclusion?
- Question #217
Port scanning can be used as part of a technical assessment to determine network vulnerabilities. The TCP XMAS scan is used to identify listening ports on the targeted system. If a...
- Question #218
Which Metasploit Framework tool can help penetration tester for evading Anti-virus Systems?
- Question #219
Which of the following is a passive wireless packet analyzer that works on Linux-based systems?
- Question #220
Which service in a PKI will vouch for the identity of an individual or company?
- Question #221
What mechanism in Windows prevents a user from accidentally executing a potentially malicious batch (.bat) or PowerShell (.ps1) script?
- Question #222
Seth is starting a penetration test from inside the network. He hasn't been given any information about the network. What type of test is he conducting?
- Question #223
What is the code written for?
- Question #224
You are performing a penetration test. You achieved access via a buffer overflow exploit and you proceed to find interesting data, such as files with usernames and passwords. You f...
- Question #225
An attacker attaches a rogue router in a network. He wants to redirect traffic to a LAN attached to his router as part of a man-in-the-middle attack. What measure on behalf of the...
- Question #226
Which system consists of a publicly available set of databases that contain domain name registration contact information?
- Question #227
A penetration test was done at a company. After the test, a report was written and given to the company's IT authorities. A section from the report is shown below: Access List shou...
- Question #228
In IPv6 what is the major difference concerning application layer vulnerabilities compared to IPv4?
- Question #229
It is a regulation that has a set of guidelines, which should be adhered to by anyone who handles any electronic medical data. These guidelines stipulate that all medical practices...
- Question #230
Jesse receives an email with an attachment labeled "Court_Notice_21206.zip". Inside the zip file named "Court_Notice_21206.docx.exe" disguised as a word document. Upon execution, a...
- Question #231
A company's Web development team has become aware of a certain type of security vulnerability in their Web software. To mitigate the possibility of this vulnerability being exploit...
- Question #232
An attacker is trying to redirect the traffic of a small office. That office is using their own mail server, DNS server and NTP server because of the importance of their job. The a...
- Question #233
Which results will be returned with the following Google search query? site:target.com site:Marketing.target.com accounting
- Question #234
Rebecca commonly sees an error on her Windows system that states that a Data Execution Prevention (DEP) error has taken place. Which of the following is most likely taking place?
- Question #235
As a Certified Ethical Hacker, you were contracted by a private firm to conduct an external security assessment through penetration testing. What document describes the specifics o...
- Question #236
When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator's Computer to update the router confi...
- Question #237
The Heartbleed bug was discovered in 2014 and is widely referred to under MITRE's Common Vulnerabilities and Exposures (CVE) as CVE-2014-0160. This bug affects the OpenSSL implemen...
- Question #238
Eve stole a file named secret.txt, transferred it to her computer and she just entered these commands: What is she trying to achieve?
- Question #239
What is the correct process for the TCP three-way handshake connection establishment and connection termination?
- Question #240
What is the Shellshock bash vulnerability attempting to do a vulnerable Linux host? env x='(){ :;};echo exploit' bash -c 'cat/etc/passwd'
- Question #241
Ricardo wants to send secret messages to a competitor company. To secure these messages, he uses a technique of hiding a secret message within an ordinary message. The technique pr...
- Question #242
A well-intentioned researcher discovers a vulnerability on the web site of a major corporation. What should he do?
- Question #243
You have compromised a server on a network and successfully opened a shell. You aimed to identify all operating systems running on the network. However, as you attempt to fingerpri...
- Question #244
What is the best description of SQL Injection?
- Question #245
You just set up a security system in your network. In what kind of system would you find the following string of characters used as a rule within its configuration? alert tcp any a...
- Question #246
What is the benefit of performing an unannounced Penetration Testing?
- Question #247
Under the "Post-attack Phase and Activities", it is the responsibility of the tester to restore the systems to a pre-test state. Which of the following activities should not be inc...
- Question #248
Which of the following is a component of a risk assessment?
- Question #249
A medium-sized healthcare IT business decides to implement a risk management strategy. Which of the following is NOT one of the five basic responses to risk?
- Question #250
Your company was hired by a small healthcare provider to perform a technical assessment on the network. What is the best approach for discovering vulnerabilities on a Windows-based...
- Question #251
Nation-state threat actors often discover vulnerabilities and hold on to them until they want to launch a sophisticated attack. The Stuxnet attack was an unprecedented style of att...
- Question #252
It is a vulnerability in GNU's bash shell, discovered in September of 2014, that gives attackers access to run remote commands on a vulnerable system. The malicious software can ta...
- Question #253
When you return to your desk after a lunch break, you notice a strange email in your inbox. The sender is someone you did business with recently, but the subject line has strange c...