CEH-001 by GAQM Valid Free Exam Practice Test

Question 1

_________ ensures that the enforcement of organizational security policy does not rely on voluntary web application user compliance. It secures information by assigning sensitivity labels on information and comparing this to the level of security a user is operating at.

A. Discretionary Access Control B. Role-based Access Control C. Mandatory Access Control D. Authorized Access Control

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

Which of the following are potential attacks on cryptography? (Select 3)

A. One-Time-Pad Attack B. Replay Attack C. Man-in-the-Middle Attack D. Known-Ciphertext Attack E. Chosen-Ciphertext Attack

Correct Answer: B,C,E

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 3

Smart cards use which protocol to transfer the certificate in a secure manner?

A. Point to Point Protocol (PPP) B. Layer 2 Tunneling Protocol (L2TP) C. Extensible Authentication Protocol (EAP) D. Point to Point Tunneling Protocol (PPTP)

Correct Answer: C

Question 4

This TCP flag instructs the sending system to transmit all buffered data immediately.

A. RST B. URG C. SYN D. PSH E. FIN

Correct Answer: D

Question 5

What does FIN in TCP flag define?

A. Used to close a TCP connection B. Used to acknowledge receipt of a previous packet or transmission C. Used to indicate the beginning of a TCP connection D. Used to abort a TCP connection abruptly

Correct Answer: A

Question 6

You wish to determine the operating system and type of web server being used. At the same time you wish to arouse no suspicion within the target organization.
While some of the methods listed below work, which holds the least risk of detection?

A. Use the netcraft web site look for the target organization's web site. B. Use nmap in paranoid mode and scan the web server. C. Make some phone calls and attempt to retrieve the information using social engineering. D. Telnet to the web server and issue commands to illicit a response.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 7

Hayden is the network security administrator for her company, a large finance firm based in Miami. Hayden just returned from a security conference in Las Vegas where they talked about all kinds of old and new security threats; many of which she did not know of. Hayden is worried about the current security state of her company's network so she decides to start scanning the network from an external IP address. To see how some of the hosts on her network react, she sends out SYN packets to an IP range. A number of IPs responds with a SYN/ACK response. Before the connection is established she sends RST packets to those hosts to stop the session. She does this to see how her intrusion detection system will log the traffic. What type of scan is Hayden attempting here?

A. Hayden is using a half-open scan to find live hosts on her network B. She is utilizing a SYN scan to find live hosts that are listening on her network C. Hayden is attempting to find live hosts on her company's network by using an XMAS scan D. The type of scan, she is using is called a NULL scan

Correct Answer: A

Question 8

What are the two basic types of attacks? (Choose two.

A. Passive B. Cracking C. DoS D. Active E. Sniffing

Correct Answer: A,D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 9

During a penetration test, a tester finds that the web application being analyzed is vulnerable to Cross Site Scripting (XSS). Which of the following conditions must be met to exploit this vulnerability?

A. The web application does not have the secure flag set. B. The session cookies do not have the HttpOnly flag set. C. The victim's browser must have ActiveX technology enabled. D. The victim user should not have an endpoint security solution.

Correct Answer: B

Question 10

When an alert rule is matched in a network-based IDS like snort, the IDS does which of the following?

A. Blocks the connection with the source IP address in the packet B. Drops the packet and moves on to the next one C. Continues to evaluate the packet until all rules are checked D. Stops checking rules, sends an alert, and lets the packet continue

Correct Answer: C

Question 11

Which type of access control is used on a router or firewall to limit network activity?

A. Role-based B. Mandatory C. Rule-based D. Discretionary

Correct Answer: C

Question 12

While performing ping scans into a target network you get a frantic call from the organization's security team. They report that they are under a denial of service attack. When you stop your scan, the smurf attack event stops showing up on the organization's IDS monitor. How can you modify your scan to prevent triggering this event in the IDS?

A. Spoof the source IP address. B. Scan more slowly. C. Only scan the Windows systems. D. Do not scan the broadcast IP.

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 13

Which of the following items of a computer system will an anti-virus program scan for viruses?

A. Windows Process List B. Boot Sector C. Deleted Files D. Password Protected Files

Correct Answer: B

Question 14

WEP is used on 802.11 networks, what was it designed for?

A. WEP is designed to provide strong encryption to a wireless local area network (WLAN) with a lever of integrity and privacy adequate for sensible but unclassified information. B. WEP is designed to provide a wireless local area network (WLAN) with a level of availability and privacy comparable to what is usually expected of a wired LAN. C. WEOP is designed to provide a wireless local area network (WLAN) with a level of privacy comparable to what it usually expected of a wired LAN. D. WEP is designed to provide a wireless local area network (WLAN) with a level of security and privacy comparable to what it usually expected of a wired LAN.

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

GAQM Certified Ethical Hacker (CEH) - CEH-001 Exam Practice Test