Test
CEH 5
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (53)
1While investigating a claim of a user downloading illegal material, the investigator goes through the files on the suspect's workstation. He comes across a file that is just called "file.txt" but when he opens it, he finds the following:
What can he infer from this file?- AA picture that has been renamed with a .txt extension
- BAn encrypted file
- CAn encoded file
- DA buffer overflow
2Harold is the senior security analyst for a small state agency in New York. He has no other security professionals that work under him, so he has to do all the security-related tasks for the agency. Coming from a computer hardware background, Harold does not have a lot of experience with security methodologies and technologies, but he was the only one who applied for the position. Harold is currently trying to run a Sniffer on the agency's network to get an idea of what kind of traffic is being passed around, but the program he is using does not seem to be capturing anything. He pours through the Sniffer's manual, but cannot find anything that directly relates to his problem. Harold decides to ask the network administrator if he has any thoughts on the problem. Harold is told that the Sniffer was not working because the agency's network is a switched network, which cannot be sniffed by some programs without some tweaking. What technique could Harold use to sniff his agency's switched network?
- AARP spoof the default gateway
- BConductMiTMagainsttheswitch
- CLaunch smurf attack against the switch
- DFlood the switch with ICMP packets
3Which Windows system tool checks integrity of critical files that has been digitally signed by Microsoft?
- Asignverif.exe
- Bsigverif.exe
- Cmsverif.exe
- Dverifier.exe
4What is "Hacktivism"?
- AHackingforacause
- BHackingruthlessly
- CAn association which groups activists
- DNone of the above
5What are the two basic types of attacks? (Choose two)
- Ados
- BPassive
- CSniffing
- Dactive
- ECracking
6User which Federal Statutes does FBI investigate for computer crimes involving e-mail scams and mail fraud?
- A18U.S.C1029PossessionofAccessDevices
- B18U.S.C1030Fraudandrelatedactivityinconnectionwithcomputers
- C18 U.S.C 1343 Fraud by wire, radio or television
- D18 U.S.C 1361 Injury to Government Property
- E18U.S.C1362Governmentcommunicationsystems
- F18U.S.C1831EconomicEspionageAct
- G18 U.S.C 1832 Trade Secrets Act
7Which one of the following is defined as the process of distributing incorrect Internet Protocol (IP) addresses/names with the intent of diverting traffic?
- ANetwork aliasing
- BDomainNameServer(DNS)poisoning
- CReverse Address Resolution Protocol (ARP)
- DPort scanning
8To what does "message repudiation" refer to what concept in the realm of email security?
- AMessagerepudiationmeansausercanvalidatewhichmailserverorserversamessagewaspassed through.
- BMessagerepudiationmeansausercanclaimdamagesforamailmessagethatdamagedtheir reputation.
- CMessage repudiation means a recipient can be sure that a message was sent from a particular person.
- DMessage repudiation means a recipient can be sure that a message was sent from a certain host.
- EMessage repudiationmeansasendercanclaimtheydidnotactuallysendaparticularmessage.
9Snort has been used to capture packets on the network. On studying the packets, the penetration tester finds it to be abnormal. If you were the penetration tester, why would you find this abnormal?
What is odd about this attack? (Choose the most appropriate statement)- AThisisnotaspoofedpacketastheIPstackhasincreasingnumbersforthethreeflags.
- BThis is back orifice activity as the scan comes from port 31337.
- CThe attacker wants to avoid creating a sub-carrier connection that is not normally valid.
- DThere packets were created by a tool; they were not created by a standard IP stack.
10Your XYZ trainee Sandra asks you which are the four existing Regional Internet Registry (RIR's)?
- AAPNIC,PICNIC,ARIN,LACNIC
- BRIPENCC,LACNIC,ARIN,APNIC
- CRIPE NCC, NANIC, ARIN, APNIC
- DRIPE NCC, ARIN, APNIC, LATNIC
11Ping 0xde.0xad.0xbe.0xef
You get a response with a valid IP address.
What is the obstructed IP address in the e-mail URL?- A222.173.190.239
- B233.34.45.64
- C54.23.56.55
- D199.223.23.45
12Which of the following tools are used for footprinting? (Choose four)
- ASam Spade
- Bnslookup
- CTraceroute
- Dneotrace
- Echeops
13NSLookup is a good tool to use to gain additional information about a target network. What does the following command accomplish?
nslookup
> server <ipaddress> > set type =any
> ls -d <target.com>- AEnablesDNSspoofing
- BLoadsbogusentriesintotheDNStable
- CVerifies zone security
- DPerforms a zone transfer
- EResetstheDNScache
14While footprinting a network, what port/service should you look for to attempt a zone transfer?
- A53UDP
- B53 tcp
- C25 UDP
- D25 tcp
- E161UDP
- F22 tcp
- G60 TCP
15Your lab partner is trying to find out more information about a competitors web site. The site has a .com extension. She has decided to use some online whois tools and look in one of the regional Internet registrys. Which one would you suggest she looks in first?
- ALACNIC
- Barin
- CAPNIC
- Dripe
- EAfriNIC
16Network Administrator Patricia is doing an audit of the network. Below are some of her findings concerning DNS. Which of these would be a cause for alarm?
Select the best answer.- ATherearetwoexternalDNSServersforInternetdomains.BothareADintegrated.
- BAllexternalDNSisdonebyanISP.
- CInternal AD Integrated DNS servers are using private DNS names that are unregistered
- DPrivateIPaddressesareusedontheinternalnetworkandareregisteredwiththeinternalADintegrated DNS server.
17
Doug is conducting a port scan of a target network. He knows that his client target network has a web server and that there is a mail server also which is up and running. Doug has been sweeping the network but has not been able to elicit any response from the remote target. Which of the following could be the most likely cause behind this lack of response? Select 4.- AUDPisfilteredbyagateway
- BThepacketTTLvalueistoolowandcannotreachthetarget
- CThe host might be down
- DThe destination network might be down
- ETheTCPwindowssizedoesnotmatch
- FICMPisfilteredbyagateway
18Joe Hacker runs the hping2 hacking tool to predict the target host's sequence numbers in one of the hacking session.
What does the first and second column mean? Select two.- AThe first column reports the sequencenumber
- BThesecondcolumnreportsthedifferencebetweenthecurrentandlastsequencenumber
- CThe second column reports the next sequence number
- DThe first column reports the difference between current and last sequence number
19You are conducting a port scan on a subnet that has ICMP blocked. You have discovered 23 live systems and after scanning each of them you notice that they all show port 21 in closed state. What should be the next logical step that should be performed?
- AConnecttoopenportstodiscoverapplications.
- BPerformapingsweeptoidentifyanyadditionalsystemsthatmightbeup.
- CPerform a SYN scan on port 21 to identify any additional systems that might be up.
- DRescan every computer to verify the results.
20War dialing is a very old attack and depicted in movies that were made years ago. Why would a modem security tester consider using such an old technique?
- AItiscool,andifitworksinthemoviesitmustworkinreallife.
- BItallowscircumventionofprotectionmechanismsbybeingontheinternalnetwork.
- CIt allows circumvention of the company PBX.
- DA good security tester would not use such a derelict technique.
21You are scanning into the target network for the first time. You find very few conventional ports open. When
you attempt to perform traditional service identification by connecting to the open ports, it yields either unreliable or no results. You are unsure of which protocols are being used. You need to discover as many different protocols as possible.
Which kind of scan would you use to achieve this? (Choose the best answer)- ANessusscanwithTCPbasedpings
- BNmapscanwiththesP(Pingscan)switch.
- CNetcat scan with the u e switches.
- DNmap with the sO (Raw IP packets) switch.
22What are two types of ICMP code used when using the ping command?
- AItusestypes0and8.
- BItusestypes13and14.
- CIt uses types 15 and 17.
- DThe ping command does not use ICMP but uses UDP.
23
You are having problems while retrieving results after performing port scanning during internal testing. You verify that there are no security devices between you and the target system. When both stealth and connect scanning do not work, you decide to perform a NULL scan with NMAP.
The first few systems scanned shows all ports open.
Which one of the following statements is probably true?- AThesystemshaveallportsopen.
- BThesystemsarerunningahostbasedIDS.
- CThe systems are web servers.
- DThe systems are running Windows.
24What port scanning method is the most reliable but also the most detectable?
- ANullScanning
- BConnectScanning
- CICMP Scanning
- Didlescan Scanning
- EHalfScanning
- FVerboseScanning
25What does an ICMP (Code 13) message normally indicates?
- AItindicatesthatthedestinationhostisunreachable
- BItindicatestothehostthatthedatagramwhichtriggeredthesourcequenchmessagewillneedtobere- sent
- CIt indicates that the packet has been administratively dropped in transit
- DIt is a request to the host to cut back the rate at which it is sending traffic to the Internet destination
26What ICMP message types are used by the ping command?
- ATimestamprequest(13)andtimestampreply(14)
- BEchorequest(8)andEchoreply(0)
- CEcho request (0) and Echo reply (1)
- DPing request (1) and Ping reply (2)
27_________ is one of the programs used to wardial.
- ADialIT
- BNetstumbler
- Ctoopac
- DKismet
- Etoneloc
28Which of the following ICMP message types are used for destinations unreachables?
- A0
- B3
- C11
- D13
- E17
29What is the proper response for a X-MAS scan if the port is closed?
- ASYN
- Back
- Cfin
- DPSH
- Erst
- Fno response
30What flags are set in a X-MAS scan?(Choose all that apply.
- Asyn
- Back
- Cfin
- Dpsh
- Erst
- Furg
31What is the disadvantage of an automated vulnerability assessment tool?
- AIneffective
- Bslow
- CProne to false positives
- DProne to false negatives
- ENoisy
32What are two things that are possible when scanning UDP ports? (Choose two.
- AAresetwillbereturned
- BAnICMPmessagewillbereturned
- CThe four-way handshake will not be completed
- DAn RFC 1294 message will be returned
- ENothing
33Name two software tools used for OS guessing? (Choose two
- ANmap
- BSnadboy
- Cqueso
- DUserInfo
- ENetBus
34Sandra is the security administrator of XYZ.com. One day she notices that the XYZ.com Oracle database server has been compromised and customer information along with financial data has been stolen. The financial loss will be estimated in millions of dollars if the database gets into the hands of competitors. Sandra wants to report this crime to the law enforcement agencies immediately.
Which organization coordinates computer crime investigations throughout the United States?- ANDCA
- Bnicp
- CCIRP
- Dnpc
- Ecia
35While reviewing the result of scanning run against a target network you come across the following:
- AABo2ksystemquery.
- Bnmapprotocolscan
- CA sniffer
- DAn SNMP walk
36You are manually conducting Idle Scanning using Hping2. During your scanning you notice that almost every query increments the IPID regardless of the port being queried. One or two of the queries cause the IPID to increment by more than one value. Why do you think this occurs?
- AThezombieyouareusingisnottrulyidle.
- BAstatefulinspectionfirewallisresettingyourqueries.
- CHping2 cannot be used for idle scanning.
- DThese ports are actually open on the target system.
37A distributed port scan operates by:
- ABlockingaccesstothescanningclientsbythetargetedhost
- BUsingdenial-of-servicesoftwareagainstarangeofTCPports
- CBlocking access to the targeted host by each of the distributed scanning clients
- DHaving multiple computers each scan a small number of ports, then correlating the results
38SNMP is a protocol used to query hosts, servers, and devices about performance or health status data. This protocol has long been used by hackers to gather great amount of information about remote hosts.
Which of the following features makes this possible? (Choose two)- AItusedTCPastheunderlyingprotocol.
- BItusescommunitystringthatistransmittedincleartext.
- CIt is susceptible to sniffing.
- DIt is used by all network devices on the market.
39What is the proper response for a NULL scan if the port is closed?
- Asyn
- Back
- Cfin
- Dpsh
- Eurg
- Frst
- Gno response
40One of your team members has asked you to analyze the following SOA record. What is the TTL? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600
3600 604800 2400.- A200303028
- B3600
- C604800
- D2400
- E60
- F4800
41One of your team members has asked you to analyze the following SOA record. What is the version? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600
3600 604800 2400.- A200303028
- B3600
- C604800
- D2400
- E60
- F4800
42MX record priority increases as the number increases. (True/False
- Atrue
- Bfalse
43Which of the following tools can be used to perform a zone transfer?
- ANSLookup
- Bfinger
- Cdig
- DSam Spade
- Ehost
- FNetcat
- Gneotrace
44Under what conditions does a secondary name server request a zone transfer from a primary name server?
- AWhenaprimarySOAishigherthatasecondarySOA
- BWhenasecondarySOAishigherthataprimarySOA
- CWhen a primary name server has had its service restarted
- DWhen a secondary name server has had its service restarted
- EWhentheTTLfallstozero
45What is a NULL scan?
- AAscaninwhichallflagsareturnedoff
- BAscaninwhichcertainflagsareoff
- CA scan in which all flags are on
- DA scan in which the packet size is set to zero
- EAscanwithaillegalpacketsize
46What is the proper response for a NULL scan if the port is open?
- Asyn
- Back
- Cfin
- Dpsh
- Erst
- Fno response
47Which of the following statements about a zone transfer correct?(Choose three.
- AAzonetransferisaccomplishedwiththeDNS
- BAzonetransferisaccomplishedwiththenslookupservice
- CA zone transfer passes all zone information that a DNS server maintains
- DA zone transfer passes all zone information that a nslookup server maintains
- EAzonetransfercanbepreventedbyblockingallinboundTCPport53connections
- FZonetransferscannotoccurontheInternet
48You have the SOA presented below in your Zone. Your secondary servers have not been able to contact your primary server to synchronize information. How long will the secondary servers attempt to contact the primary server before it considers that zone is dead and stops responding to queries?
collegae.edu.SOA, cikkye.edu ipad.college.edu. (200302028 3600 3600 604800 3600)- AOneday
- Bone hour
- Cone week
- Done month
49A zone file consists of which of the following Resource Records (RRs)?
- ADNS,NS,AXFR,andMXrecords
- BDNS,NS,PTR,andMXrecords
- CSOA, NS, AXFR, and MX records
- DSOA, NS, A, and MX records
50Which DNS resource record can indicate how long any "DNS poisoning" could last?
- Amx
- Bsoa
- Cns
- Dtimeout
51Which of the following tools are used for enumeration? (Choose three.)
- ASolarWinds
- BUSER2SID
- CCheops
- DSID2USER
- EDumpSec
52What did the following commands determine? C: user2sid \earth guest
S-1-5-21-343818398-789336058-1343024091-501 C:sid2user 5 21 343818398 789336058 1343024091 500 Name is Joe
Domain is EARTH- AThattheJoeaccounthasaSIDof500
- BThesecommandsdemonstratethattheguestaccounthasNOTbeendisabled
- CThese commands demonstrate that the guest account has been disabled
- DThat the true administrator is Joe
- EIssuedalone,thesecommandsprovenothing
53Eve is spending her day scanning the library computers. She notices that Alice is using a computer whose
port 445 is active and listening. Eve uses the ENUM tool to enumerate Alice machine. From the command
prompt, she types the following command.
For /f "tokens=1 %%a in (hackfile.txt) do net use * \\10.1.2.3\c$ /user:"Administrator" %%a
What is Eve trying to do?- AEve is trying to connect as an user with Administrator privileges
- BEve is trying to enumerate all users with Administrative privileges
- CEve is trying to carry out a password crack for user Administrator
- DEve is trying to escalate privilege of the null user to that of Administrator
Información
- Descripción
- Informática y Comunicaciones Test sobre CEH 5, creado por ma elideth avila el 30/03/2017.
- Autor
- ma elideth avila
- Idioma
- Español
- Visitas
- 2
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test