Quiz
CEHv9 Chapter 2
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (11)
1Which of the following would be the best choice for footprinting restricted URLs and OS information from a target?
- Awww.archive.org
- Bww.alexa.com
- CNetcraft
- DYesware
2While footprinting a network, you successfully perform a zone transfer. Which DNS record in the zone transfer indicates the company’s e-mail server?
- AMX
- BEM
- CSOA
- DPTR
3Which of the following best describes the role that the U.S. Computer Security Incident Response Team (CSIRT) provides?
- AVulnerability measurement and assessments for the U.S. Department of Defense
- BA reliable and consistent point of contact for all incident response services for associates of the Department of Homeland Security
- CIncident response services for all Internet providers
- DPen test registration for public and private sector
4An SOA record gathered from a zone transfer is shown here: @ IN SOA DNSRV1.anycomp.com. postmaster.anycomp.com. ( 4 ; serial number 3600 ; refresh [1h] 600 ; retry [10m] 86400 ; expire [1d] 3600 ) ; min TTL [1h] What is the name of the authoritative DNS server for the domain, and how often will secondary servers check in for updates?
- ADNSRV1.anycomp.com, 3,600 seconds
- BDNSRV1.anycomp.com, 600 seconds
- CDNSRV1.anycomp.com, 4 seconds
- Dpostmaster.anycomp.com, 600 seconds
5A security peer is confused about a recent incident. An attacker successfully accessed a machine in the organization and made off with some sensitive data. A full vulnerability scan was run immediately following the theft, and nothing was discovered. Which of the following best describes what may have happened?
- AThe attacker took advantage of a zero-day vulnerability on the machine.
- BThe attacker performed a full rebuild of the machine after he was done.
- CThe attacker performed a denial-of-service attack.
- DSecurity measures on the device were completely disabled before the attack began.
6Which footprinting tool or technique can be used to find the names and addresses of employees or technical points of contact?
- Awhois
- Bnslookup
- Cdig
- Dtraceroute
7Which Google hack would display all pages that have the words SQL and Version in their titles?
- Ainurl:SQL inurl:version
- Ballinurl:SQL version
- Cintitle:SQL inurl:version
- Dallintitle:SQL version
8Which of the following is a passive footprinting method? (Choose all that apply.)
- AChecking DNS replies for network mapping purposes
- BCollecting information through publicly accessible sources
- CPerforming a ping sweep against the network range
- DSniffing network traffic through a network tap
9Which DNS record type maps an IP address to a hostname and is used most often for DNS lookups?
- ANS
- BMX
- CA
- DSOA
10You have an FTP service and an HTTP site on a single server. Which DNS record allows you to alias both services to the same record (IP address)?
- ANS
- BSOA
- CCNAME
- DPTR
11As a pen test team member, you begin searching for IP ranges owned by the target organization and discover their network range. You also read job postings and news articles and visit the organization’s website. Throughout the first week of the test, you also observe when employees come to and leave work, and you rummage through the trash outside the building for useful information. Which type of footprinting are you accomplishing?
- AActive
- BPassive
- CReconnaissance
- DNone of the above
Informationen
- Beschreibung
- Information Technology Quiz am CEHv9 Chapter 2, erstellt von Paul Anstall am 02/02/2017.
- Autor
- Paul Anstall
- Sprache
- English
- Aufrufe
- 77
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz