Test
Test CEH 1
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (60)
1Robin, an attacker, is attempting to bypass the firewalls of an organization through the DNS tunneling method in order to exfiltrate data. He is using the NSTX tool for bypassing the firewalls. On which of the following ports should Robin run the NSTX tool?
- APort 53
- BPort 80
- CPort 50
- DPort 23
2Bill is a network administrator. He wants to eliminate unencrypted traffic inside his company's network. He decides to set up a SPAN port and capture all traffic to the datacenter. He immediately discovers unencrypted traffic in port UDP 161. What protocol is this port using and how can he secure that traffic?
- AllSNMP and he should change it to SNMP V3
- BSNMP and he should change it to SNMP V2, which is encrypted
- CRPC and the best practice is to disable RPC completely
- DIt is not necessary to perform any actions, as SNMP is not carrying Important information
3George is a security professional working for iTech Solutions. He was tasked with securely transferring sensitive data of the organization between industrial systems. In this process, he used a short-range communication protocol based on the IEEE 203.15.4 standard. This protocol is used in devices that transfer data infrequently at a low rate in a restricted area, within a range of 10-100 m. What is the short-range wireless communication technology George employed in the above scenario?
- ALPWAN
- BMQTT
- CZigbee
- DNB-IoT
4A cloud security engineer uses the Docker architecture to employ a client server
model in the application she is working on She utilizes a component that can process API requests and handle various Docker objects, such as containers, volumes, images. and networks. What is the component of the Docker architecture used by Annie in the above scenario?- ADocker objects
- BDocker client
- CDocker registries
- DDocker daemon
5Daniel is a professional hacker who is attempting to perform an SQL injection attack on a target website, www.moviescope.com. During this process, he encountered an IDS that detects SQL injection attempts based on predefined signatures. To evade any comparison statement, he attempted placing characters such as or 1=1" in any basic 15 injection statement such as or
1=1. Identify the evasion technique used by Daniel in the above scenario.- ANull byte
- BIP fragmentation
- CVariation
- DChar encoding
6Widespread fraud at Enron. Worldcom and Tyco led to the creation of a law that was designed to improve the accuracy and accountability of corporate disclosures. It covers accounting firms and third parties that provide financial services to some organizations and came into effect in 2002 This law is known by what acronym
- ASOX
- BHIPAA
- CPCI DSS
- DFedRAMP
7Samuel, a professional hacker, monitored and intercepted already established traffic between Bob and a host machine to predict Bob's ISN. Using this ISN, Samuel sent spoofed packets with Bob's IP address to the host machine. The host machine responded with a packet having an incremented ISN. Consequently, Bob's connection got hung, and Samuel was able to communicate with the host machine on behalf of Bob. What is the type of attack performed by Samuel in the above scenario?
- AUDP hijacking
- BTCP/IP hijacking
- CForbidden attack
- DBlind hijacking
8Which type of virus can change its own code and then cipher itself multiple times as it replicates?
- ATunneling virus
- BStealth virus
- CCavity Virus
- DEncryption virus
9John, a professional hacker performs a network attack on a renowned organization and gains unauthorized access to the target network He remains in the network without being detected for a long time and obtains sensitive information without sabotaging the organization Which of the following attack techniques is used by John
- AInsider threat
- BAdvanced persistent threat
- CDiversion theft
- DSpear phishing sites
10Ethical hacker Jane Doe is attempting to crack the password of the head of the IT department of ABC company. She is utilizing a rainbow table and notices upon entering a password that extra characters are added to the password after submitting. What countermeasure is the company using to protect against rainbow tables?
- APassword key hashing
- BAccount lockout
- CPassword hashing
- DPassword salting
11To invisibly maintain access to a machine, an attacker utilizes a rootkit that sits undetected in the core components of the operating system. What is this type of rootkit an example of?
- AHardware rootkit
- BFirmware rootkit
- CKernel rootkit
- DHypervisor rootkit
12After an audit the auditors inform you that there is a critical finding that you must tackle immediately You read the audit report and the problem is the service running on port 389 Which service is this and how can you tackle the problem?
- AThe findings do not require immediate actions and are only suggestions.
- BThe service is SMTP and you must change it to SMIME, which is an encrypted way to send emails.
- CThe service is LDAP, and you must change it to 636, which is LDAPS
- DThe service is NTP and you have to change it from UDP to TCP in order to encrypt it.
13Bob, an attacker, has managed to access a target loT device. He employed an online tool to gather information related to the model of the loT device and the certifications granted to it. Which of the following tools did Bob employ to gather the above information?
- AEarthExplorer
- Bsearch.com
- CGoogle image search
- DFCC ID search
14What firewall evasion scanning technique makes use of a zombie system that has low network activity as well as its fragment identification numbers?
- ADecoy scanning
- BPacket fragmentation scanning
- CSpoof source address scanning
- DIdle scanning
15Alice, a professional hacker, targeted an organization's cloud services. She infiltrated the target's MSP provider by sending spear-phishing emails and distributed custom-made malware to compromise user accounts and gain remote access to the cloud service. Further, she accessed the target customer profiles with her MSP account, compressed the customer data,
and stored them in the MSP. Then, she used this information to launch further attacks on the target organization. Which of the following cloud attacks did Alice perform in the above scenario?- AMan-in-the-cloud (MITC) attack
- BCloud hopper attack
- CCloudborne attack
- DCloud cryptojacking
16Clark is a professional hacker. He created and configured multiple domains pointing to the same host to switch quickly between the domains and avoid detection. identify the behavior of the adversary in the above scenario
- AUse of DNS tunneling
- BUnspecified proxy activities
- CData staging
- DUse of command-line interface
17Alice needs to send a confidential document to her coworker, Bryan. Their company has public key infrastructure set up. Therefore, Alice both encrypts the message and digitally signs it. Alice uses _______________ to encrypt the message, and Bryan uses_______________ to confirm the digital signature.
- ABryan's private key, Alice's public key
- BBryan's public key, Bryan's public key
- CBryan's public key, Alice's public key
- DAlice's public key; Alice's public key
18John, a professional hacker, decided to use DNS to perform data exfiltration on a target network. In this process, he embedded malicious data into the DNS protocol packets that even DNSSEC cannot detect. Using this technique, John successfully injected malware to bypass a firewall and maintained communication with the victim machine and C&C server. What is the
technique employed by John to bypass the firewall?- ADNS cache snooping
- BDNS tunneling method
- CDNSSEC zone walking
- DDNS enumeration
19Mr. Omkar performed a tool-based vulnerability assessment and found two vulnerabilities During further analysis, he found that those issues are What will you call these issues? not true vulnerabilities.
- AFalse positives
- BTrue negatives
- CTrue positives
- DFalse negatives
20Infecting a system with malware and using phishing to gain credentials to a system or web application are examples of which phase of the ethical hacking methodology?
- AGaining access
- BReconnaissance
- CMaintaining access
- DScanning
21You are a penetration tester tasked with testing the wireless network of your client Brakeme SA. You are attempting to break into the wireless network with the SSID "Brakeme-Internal." You realize that this network uses WPA3 encryption. Which of the following vulnerabilities is promising to exploit?
- AAP misconfiguration
- BCross-site request forgery
- CKey reinstallation attack
- DDragonblood
22Scenario: Joe turns on his home computer to access personal online banking. When he enters the URL www.bank.com, the website is displayed, but it prompts him to re-enter his credentials as if he has never visited the site before. When he examines the website URL closer, he finds that the site is not secure What type of attack he is experiencing? and the web address appears different. 18 13
- ADoS attack
- BDHCP spoofing
- CARP cache poisoning
- DDNS hijacking
23Kevin, a professional hacker, wants to penetrate CyberTech Inc.'s network. He employed a technique, using which he encoded packets with Unicode characters. The company's IDS cannot recognize the packets, but the target web server can decode them. What is the technique used by Kevin to evade the IDS system?
- ADesynchronization
- BUrgency flag
- CSession splicing
- DObfuscating
24This form of encryption algorithm is a symmetric key block cipher that is characterized by a 128-bit block size, and its key size can be up to 256 bits. Which among the following is this encryption algorithm
- AHMAC encryption algorithm
- BBlowfish encryption algorithm
- CIDEA
- DTwofish encryption algorithm
25company has decided to use a new customer relationship management tool. After performing the appropriate research, they decided to purchase a subscription to a cloud-hosted solution. The only administrative task that will need to perform is the management of user accounts. The provider will take care of the hardware, operating system, and software administration including patching and monitoring. Which of the following is this type of solution?
- AIaaS
- BCaaS
- CPaaS
- DSaaS
26John, a professional hacker, targeted an organization that uses LDAP for accessing distributed directory services. He used an automated tool to anonymously query the LDAP service for sensitive information such as usernames, addresses, departmental details, and server names to launch further attacks on the target organization. What is the tool employed by
John to gather information from the LDAP service?- AJXplorer
- BZabasearch
- CEarthExplorer
- Dike-scan
27What are common files on a web server that can be misconfigured and provide useful information for a hacker such as verbose error messages?
- Aidg.dll
- Bphp.ini
- Cadministration.config
- Dhttpd.conf
28During the enumeration phase Lawrence performs banner grabbing to obtain information such as OS details and versions enumerated runis directly on TCP port 445 of services running. Which of the following services is enumerated by Lawrence in this scenario?
- ANetwork File System (NFS)
- BRemote procedure call (RPC)
- CTelnet
- DServer Message Block (SMB)
29A friend of yours tells you that he downloaded and executed a file that was sent to him by a coworker. Since the file did nothing when executed, he asks you for help because he suspects that he may have installed a trojan on his computer.
What tests would you perform to determine whether his computer is infected?- AUse ExifTool and check for malicious content.
- BUse netstat and check for outgoing connections to strange IP addresses or domains.
- CYou do not check; rather, you immediately restore a previous snapshot of the operating
system. - DUpload the file to VirusTotal.
30Attacker Lauren has gained the credentials of an organization's internal server system. and she was often logging in during irregular times to monitor the network activities. The Use netstat and check for outgoing connections to the organization was skeptical about the login times and appointed security professional Robert to determine the issue. Robert analyzed compromised
devices to find incident details such as the type of attack, its severity, target, impact method of propagation, and vulnerabilities exploited.
What is the incident handling and response (IH&R) phase in which Robert has determined these issues?- AIncident triage
- BIncident recording and assignment
- Creparation
- DEradication
31A penetration tester is performing the footprinting process and is reviewing publicly available information about an organization by using the Google search engine. Which of the following advanced operators would allow the pen tester to restrict the search to the organization's web domain?
- A[link:]
- B[location]
- C[allinurl:]
- D[site:]
321. Victim opens the attacker's web site
2. Attacker sets up a web site which contains interesting and attractive content like Do you want to make $1000 in a day?
3, Victim clicks on the interesting and attractive content URL.
4. Attacker creates a transparent iframe in front of the URL which the victim attempts to click, so the victim thinks that he/she clicks on the Do you want to make $1000 in a day? URL but actually he/she clicks on the content iframe which is setup by the attacker What is the name of the attack which or URL that exists in the transparent is mentioned in the scenario?- ASession Fixation
- BHTTP Parameter Pollution
- CClickJacking Attack
- DHTML Injection
33Ricardo has discovered the username for an application in his target's environment. As he has a limited amount of time, he decides to attempt to use a list of common passwords he found on the Internet. He compiles them into a list and then feeds that list as an argument into his password-cracking application.
What type of attack is Ricardo performing?- ADictionary
- BBrute force
- CKnown plaintext
- DPassword spraying
34While testing a web application in development you notice that the web server does not properly ignore the "dot dot slash() character string and instead returns the file listing of a folder higher up in the folder structure of the server What kind of attack is possible in this scenario?
- ACross-site scripting
- BDenial of service
- CSQL injection
- DDirectory traversal
35Bob was recently hired by a medical company after it experienced a major cyber security breach. Many patients are complaining that their personal medical records are fully exposed on the Internet and someone can find them with a simple Google search Bob's boss is very worried because of regulations that protect those data. Which of the following regulations is mostly violated?
- APII
- BISO 2002
- CHIPPA/PHI
- DPCI DSS
36David is a security professional working in an organization, and he is implementing a vulnerability management program in the organization to evaluate and control the risks and vulnerabilities in its IT infrastructure. He is currently executing the process of applying fixes on vulnerable systems to reduce the impact and severity of vulnerabilities. Which phase of the
vulnerability-management life cycle is David currently in?- ARisk assessment
- BRemediation
- CVulnerability scan
- DVerification
37In the Common Vulnerability Scoring System (CVSS) v3.1 severity ratings, what range does medium vulnerability fall on?
- A4.0-6.9
- B4.0-6.0
- C3.9-6.9
- D3.0-6.9
38What is the port to block first in case you are suspicious that an lot of have been
compromised?- A443
- B80
- C22
- D48101
39Jason, an attacker, targeted an organization to perform an attack on its Internet-facing web server with the intention of gaining access to backend servers, which are protected by a firewall. In this process, he used a URL https://xyz.com /feed.php?url=external site.com/feed/to to obtain a remote feed and alter the URL input to the local host to view all the local resources on the target server. What is the type of attack Jason performed in the above scenario?
- AWeb server misconfiguration
- BWebsite defacement
- CWeb cache poisoning attacks
- DServer-side request forgery (SSRF) attack
40Richard, an attacker, aimed to hack loT devices connected to a target network. In this process, Richard recorded the frequency required to share information between connected devices. After obtaining the frequency, he captured the original data when commands were initiated by the connected devices. Once the original data were collected, he used free tools
such as URH to segregate the command sequence. Subsequently, he started injecting the segregated command sequence on the same frequency into the loT network, which repeats the captured signals of the devices. What is the type of attack performed by Richard in the above scenario?- AReplay attack
- BSide-channel attack
- CReconnaissance attack
- DCryptanalysis attack
41Don, a student, came across a gaming app in a third-party app store and installed. Subsequently, all the legitimate apps in his smartphone were it.replaced by deceptive applications that appeared legitimate. He also received many advertisements on his smartphone after installing the app. What is the attack performed on Don in the above scenario?
- AAgent Smith attack
- BSMS phishing attack
- CClickjacking
- DSIM card attack
42Robin, a professional hacker, targeted an organization's network to sniff all the traffic. During this process, Robin plugged in a rogue switch to an unused port in the LAN with a priority lower than any other switch in the network so that he could make it a root bridge that will later allow him to sniff all the traffic in the network. What is the attack performed by Robin in the above scenario?
- ADNS poisoning attack
- BVLAN hopping attack
- CSTP attack
- DRRP spoofing attack
43Sam is working as a system administrator in an organization. He captured the principal characteristics of a vulnerability and produced a numerical score to reflect its severity using CVSS v3.0 to properly assess and prioritize the organization's vulnerability management processes. The base score that Sam obtained after performing CVSS rating was 4.0 What is the CVSS severity level of the vulnerability discovered by Sam in the above scenario?
- AHigh
- BMedium
- CLow
- DCritical
44Steven connected his iPhone to a public computer that had been infected by Clark, an attacker. After establishing the connection with the public computer. Steven enabled iTunes Wi-Fi sync on the computer so that the device could continue communication with that computer even after being physically disconnected. Now. Clark gains access to Steven's iPhone through the infected computer and is able to monitor and read all of Steven's activity on the iPhone,
even after the device is out of the communication zone. Which of the following attacks is performed by Clark in the above scenario?- AiOS trustjacking
- BExploiting SS7 vulnerability
- CiOS jailbreaking
- DMan-in-the-disk attack
45Clark, a professional hacker, was hired by an organization to gather sensitive information about its competitors surreptitiously. Clark gathers the server IP address of the target organization using Whois footprinting. Further, he entered the server IP address as an input to an online tool to retrieve information such as the network range of the target organization and to identify the network topology and operating system used in the network.
What is the online tool employed by Clark in the above scenario?- AARIN
- BBaidu
- CDuckDuckGo
- DACL
46While browsing his Facebook feed. Matt sees a picture one of his friends posted with the caption, "Learn more about your friends!", as well as a number of personal questions. Matt is suspicious and texts his friend, who confirms that he did indeed post it. With assurance that the post is legitimate, Matt responds to the questions on the post. A few days later, Matt's bank account has been accessed, and the password has been changed. What most likely happened?
- AMatt inadvertently provided his password when responding to the post
- BMatt's bank-account login information was brute forced
- CMatt inadvertently provided the answers to his security questions when responding to the post
- DMatt's computer was infected with a keylogger
47Attacker Steve targeted an organization's network with the aim of redirecting the company's web traffic to another malicious website. To achieve this goal, Steve performed DNS cache poisoning by exploiting the vulnerabilities in the DNS server software and modified the original IP address of the target website to that of a fake website.
What is the technique employed by Steve to gather information for identity theft?- APharming
- BWardriving
- CPretexting
- DSkimming
48You are a penetration tester working to test the user awareness of the employees of the client XYZ. You harvested two employees' emails from some public sources and are creating a client-side backdoor to send it to the employees via email. Which stage of the cyber kill chain are you at?
- ACommand and control
- BExploitation
- CWeaponization
- DReconnaissance
49Bobby, an attacker, targeted a user and decided to hijack and intercept all their wireless communications. He installed a fake communication tower between two authentic endpoints to mislead the victim. Bobby used this virtual tower to interrupt the data transmission between theuser and real tower, attempting to hijack an active session. Upon receiving the user's request, Bobby manipulated the traffic with the virtual tower and redirected the victim to a malicious website. What is the attack performed by Bobby in the above scenario?
- AKRACK attack
- BJamming signal attack
- CaLTEr attack
- DNext Wardriving
50At what stage of the cyber kill chain theory model does data exfiltration occur?
- AActions on objectives
- BWeaponization
- CCommand and control
- DInstallation
51What piece of hardware on a computer's motherboard generates encryption keys and only releases a part of the key so that decrypting a disk on a new piece of hardware is not possible?
- AUEFI
- BCPU
- CTPM
- DGPU
52To create a botnet, the attacker can use several techniques to scan vulnerable machines. The attacker first collects information about a large number of vulnerable machines to create a list. Subsequently, they infect the machines. The list is divided by assigning half of the list to the newly compromised machines. The scanning process runs simultaneously. This technique ensures the spreading and installation of malicious code in little time.
Which technique is discussed here?- ASubnet scanning technique
- BTopological scanning technique
- CHit-list scanning technique
- DPermutation scanning technique
53Sam, a professional hacker, targeted an organization with intention of compromising AWS IAM credentials. He attempted to lure one of the employees of the organization initiating fake calls while posing as a legitimate employee. Moreover, he sent phishing emails to steal the AWS IAM credentials and further compromise the employee's account. What is the technique used by Sam to compromise the AWS IAM credentials?
- AInsider threat
- BSocial engineering
- CReverse engineering
- DPassword reuse
54Gilbert, a web developer, uses a centralized web API to reduce complexity and increase the integrity of updating and changing data. For this purpose, he uses a web service that uses HTTP methods such as PUT, POST, GET, and DELETE and can improve the overall performance, visibility, scalability, reliability, and portability of an application. What is the type of web-service API mentioned in the above scenario?
- ASOAP API
- BRESTful API
- CJSON-RPC
- DREST API
55Nicolas just found a vulnerability on a public-facing system that is considered a zero-day vulnerability. He sent an email to the owner of the public system describing the problem and how the owner can protect themselves from that vulnerability. He also sent an email to Microsoft informing them of the problem that their systems are exposed to. What type of hacker is Nicolas?
- AWhite hat
- BRed hat
- CGray hat
- DBlack hat
56Which of the following commands will check for valid users in SMTP?
- AEXPN
- BCHK
- CRCPT
- DVRFY
57A newly joined employee, Janet, has been allocated an existing system used by a previous employee. Before issuing the system to Janet, it was assessed by Martin, the administrator. Martin found that there were possibilities of compromise through user directories, registries, and other system parameters. He also identified vulnerabilities such as native configuration tables, incorrect registry or file permissions, and software configuration errors. What is the type of vulnerability assessment performed by Martin?
- ACredentialed assessment
- BDistributed assessment
- CHost-based assessment
- DDatabase assessment
58John is investigating web-application firewall logs and observers that someone is attempting to inject the following:
char buff[10];
buff[10] = 'a';
What type of attack is this?- ACSRF
- BBuffer overflow
- CXSS
- DSQL injection
59Garry is a network administrator in an organization. He uses SNMP to manage networked devices from a remote location. To manage nodes in the network, he uses MIB, which contains formal descriptions of all network objects managed by SNMP. He accesses the contents of MIB by using a web browser either by retrieving information from an MIB that contains object types for workstations and server services. entering the IP address and Lseries.mib or by entering the
DNS library name and Lseries.mib. He is currently retrieving information from an MIB that contains object type for workstations Which of the following types of MIB is accessed by Garry in the above scenario?- AMIB ILMIB
- BWINS.MIB
- CDHCP MIB
- DLNMIB2 MIB
60An organization is performing a vulnerability assessment for mitigating threats. James, a pen tester, scanned the organization by building an inventory of the protocols found on the organization's machines to detect which ports are attached to services such as an email server, a web server, or a database server. After identifying the services, he selected the vulnerabilities on each machine test. and started executing only the relevant What is the type of vulnerability assessment solution that James employed in the above scenario?
- AProduct-based solutions
- BTree-based assessment
- CService-based solutions
- DInference-based assessment
Información
- Descripción
- Professional CEH Test sobre Test CEH 1, creado por Cristian Osvaldo Gómez el 19/09/2022.
- Idioma
- Español
- Visitas
- 15
- Historial
- Creado el 19 sep 2022 · actualizado el 8 oct 2022
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test