GAQM CPEH-001 Exam Questions Instant Access

Question 1

Which is the right sequence of packets sent during the initial TCP three way handshake?

AFIN, FIN-ACK, ACK

BSYN, URG, ACK

CSYN, ACK, SYN-ACK

DSYN, SYN-ACK, ACK

Answer : D

A TCP connection always starts with a request for synchronization, a SYN, the reply to that would be another SYN together with a ACK to acknowledge that the last package was delivered successfully and the last part of the three way handshake should be only an ACK to acknowledge that the SYN reply was recived.

Question 2

Joseph was the Web site administrator for the Mason Insurance in New York, who's main Web site was located at www.masonins.com. Joseph uses his laptop computer regularly to administer the Web site. One night, Joseph received an urgent phone call from his friend, Smith. According to Smith, the main Mason Insurance web site had been vandalized! All of its normal content was removed and replaced with an attacker's message ''Hacker Message: You are dead! Freaks!

From his office, which was directly connected to Mason Insurance's internal network, Joseph surfed to the Web site using his laptop. In his browser, the Web site looked completely intact. No changes were apparent. Joseph called a friend of his at his home to help troubleshoot the problem. The Web site appeared defaced when his friend visited using his DSL connection. So, while Smith and his friend could see the defaced page, Joseph saw the intact Mason Insurance web site. To help make sense of this problem, Joseph decided to access the Web site using his dial-up ISP. He disconnected his laptop from the corporate internal network and used his modem to dial up the same ISP used by Smith. After his modem connected, he quickly typed www.masonins.com in his browser to reveal the following web page:

H@cker Mess@ge:

Y0u @re De@d! Fre@ks!

After seeing the defaced Web site, he disconnected his dial-up line, reconnected to the internal network, and used Secure Shell (SSH) to log in directly to the Web server. He ran Tripwire against the entire Web site, and determined that every system file and all the Web content on the server were intact. How did the attacker accomplish this hack?

AARP spoofing

BSQL injection

CDNS poisoning

DRouting table injection

Answer : C

External calls for the Web site has been redirected to another server by a successful DNS poisoning.

Question 3

Symmetric encryption algorithms are known to be fast but present great challenges on the key management side. Asymmetric encryption algorithms are slow but allow communication with a remote host without having to transfer a key out of band or in person. If we combine the strength of both crypto systems where we use the symmetric algorithm to encrypt the bulk of the data and then use the asymmetric encryption system to encrypt the symmetric key, what would this type of usage be known as?

ASymmetric system

BCombined system

CHybrid system

DAsymmetric system

Answer : C

Because of the complexity of the underlying problems, most public-key algorithms involve operations such as modular multiplication and exponentiation, which are much more computationally expensive than the techniques used in most block ciphers, especially with typical key sizes. As a result, public-key cryptosystems are commonly 'hybrid' systems, in which a fast symmetric-key encryption algorithm is used for the message itself, while the relevant symmetric key is sent with the message, but encrypted using a public-key algorithm. Similarly, hybrid signature schemes are often used, in which a cryptographic hash function is computed, and only the resulting hash is digitally signed.

Question 4

Finding tools to run dictionary and brute forcing attacks against FTP and Web servers is an easy task for hackers. They use tools such as arhontus or brutus to break into remote servers.

A command such as this, will attack a given 10.0.0.34 FTP and Telnet servers simultaneously with a list of passwords and a single login namE. linksys. Many FTP-specific password-guessing tools are also available from major security sites. What defensive measures will you take to protect your network from these attacks?

ANever leave a default password

BNever use a password that can be found in a dictionary

CNever use a password related to your hobbies, pets, relatives, or date of birth.

DUse a word that has more than 21 characters from a dictionary as the password

ENever use a password related to the hostname, domain name, or anything else that can be found with whois

Answer : A, B, C, E

Question 5

The programmers on your team are analyzing the free, open source software being used to run FTP services on a server in your organization. They notice that there is excessive number of functions in the source code that might lead to buffer overflow. These C++ functions do not check bounds. Identify the line in the source code that might lead to buffer overflow?

A9A.9

B17B.17

C20C.20

D32D.32

E35E.35

Answer : B

Question 6

In the context of Trojans, what is the definition of a Wrapper?

AAn encryption tool to protect the Trojan

BA tool used to bind the Trojan with a legitimate file

CA tool used to calculate bandwidth and CPU cycles wasted by the Trojan

DA tool used to encapsulate packets within a new header and footer

Answer : B

Wrapper does not change header or footer of any packets but it mix between legitimate file and Trojan file.

Question 7

Which of the following are variants of mandatory access control mechanisms? (Choose two.)

ATwo factor authentication

BAcceptable use policy

CUsername / password

DUser education program

ESign in register

Answer : A, C

GAQM Certified Professional Ethical Hacker (CPEH) CPEH-001 Exam Questions