GAQM CPEH-001 Exam Questions Instant Access

Question 1

Every company needs a formal written document which spells out to employees precisely what they are allowed to use the company's systems for, what is prohibited, and what will happen to them if they break the rules. Two printed copies of the policy should be given to every employee as soon as possible after they join the organization. The employee should be asked to sign one copy, which should be safely filed by the company. No one should be allowed to use the company's computer systems until they have signed the policy in acceptance of its terms. What is this document called?

AInformation Audit Policy (IAP)

BInformation Security Policy (ISP)

CPenetration Testing Policy (PTP)

DCompany Compliance Policy (CCP)

Answer : B

Question 2

Carl has successfully compromised a web server from behind a firewall by exploiting a vulnerability in the web server program. He wants to proceed by installing a backdoor program. However, he is aware that not all inbound ports on the firewall are in the open state.From the list given below, identify the port that is most likely to be open and allowed to reach the server that Carl has just compromised.

A53

B110

C25

D69

Answer : A

Port 53 is used by DNS and is almost always open, the problem is often that the port is opened for the hole world and not only for outside DNS servers.

Question 3

During a penetration test, the tester conducts an ACK scan using NMAP against the external interface of the DMZ firewall. NMAP reports that port 80 is unfiltered. Based on this response, which type of packet inspection is the firewall conducting?

AHost

BStateful

CStateless

DApplication

Answer : C

Question 4

Erik notices a big increase in UDP packets sent to port 1026 and 1027 occasionally. He enters the following at the command prompt.

$ nc -l -p 1026 -u -v

In response, he sees the following message.

cell(?(c)????STOPALERT77STOP! WINDOWS REQUIRES IMMEDIATE ATTENTION.

Windows has found 47 Critical Errors.

To fix the errors please do the following:

1. Download Registry Repair from: www.reg-patch.com

2. Install Registry Repair

3. Run Registry Repair

4. Reboot your computer

FAILURE TO ACT NOW MAY LEAD TO DATA LOSS AND CORRUPTION!

What would you infer from this alert?

AThe machine is redirecting traffic to www.reg-patch.com using adware

BIt is a genuine fault of windows registry and the registry needs to be backed up

CAn attacker has compromised the machine and backdoored ports 1026 and 1027

DIt is a messenger spam. Windows creates a listener on one of the low dynamic ports from 1026 to 1029 and the message usually promotes malware disguised as legitimate utilities

Answer : D

The 'net send' Messenger service can be used by unauthorized users of your computer, without gaining any kind of privileged access, to cause a pop-up window to appear on your computer. Lately, this feature has been used by unsolicited commercial advertisers to inform many campus users about a 'university diploma service'...

Question 5

Whichsecurity strategy requires using several, varying methods to protect IT systems againstattacks?

ADefense in depth

BThree-way handshake

CCovert channels

DExponential backoff algorithm

Answer : A

Question 6

Which of the following is a preventive control?

ASmart card authentication

BSecurity policy

CAudit trail

DContinuity of operations plan

Answer : A

Question 7

One advantage of an application-level firewall is the ability to

Afilter packets at the network level.

Bfilter specific commands, such as http:post.

Cretain state information for each packet.

Dmonitor tcp handshaking.

Answer : B

GAQM Certified Professional Ethical Hacker (CPEH) CPEH-001 Exam Questions