CEHv12: Certified Ethical Hacker Practice Questions Part 2

Which of the following is not an acceptable method of IDS evasion?

Sending the split packets out-of-order with delay is considered an example of ______________.

Which of the following is not a type of Open Source Web Server architecture?

Using dots and slash sequences, an attacker attempts a trial and error strategy to access restricted directories. Which type of Web server attack is this?

An attacker sends a request that allows him to add a header response; the user is now sent to a malicious website. What kind of attack is this?

An update that is specially designed to fix the issue for a live production environment is called ________________________.

A piece of Software developed to fix an issue is called ________________________.

Which of the following is a tool for patch management?

A person who is in charge of the web application’s management and setup is referred to as ________________________.

Which of the following is not a Back-end Programming language?

Which of the following is not a Front-end Programming language?

Web Applications architecture is categorized into three basic layers. Which of the following are they?

An attacker has accessed the web application. Now, he is escalating privileges to access sensitive information. Which type of web application attack is this?

Which of the following is not appropriate for a Data Connectivity attack between the application and its database?

Inferential Injection is also called ________________________.

An attacker is using the same communication channel to launch the injection attack and gather information from the response. Which type of SQL injection is being performed?

To extract data from a database, which SQL statement is used?

To update data in a database, which SQL statement is used?

Which SQL Query is correct to extract only the “UserID” field from the “Employees” table in the database?

What does SQL stand for?

The name of the access point that is usually broadcasting for the identification of wireless networks is called ________________________.

How many frames are communicated between the client and AP to complete the authentication process in a Wi-Fi Network with Open Authentication?

How many frames are communicated between the client and AP to complete the authentication process in a Wi-Fi Network with Shared Key Authentication?

Wi-Fi authentication with a centralized authentication server is deployed by using __________.

____________ provides the Doughnut Shaped Radiation pattern.

Which Wireless encryption uses a 24-bit Initialization Vector to create RC4 with CRC?

Which of the following protocols ensures per packet key by dynamically generating a 128-bit key?

In a Bluetooth network, target devices are being overflowed by random packets. Which type of Bluetooth attack is this?

An attacker attempts to gain remote access to a Bluetooth device to compromise security. Which type of attack is this?

Which tools are appropriate for packet sniffing in a wireless network?

Which device can detect rogue wireless access points?

Jailbreaking refers to ________________________.

When an iOS device is rebooted, it will no longer have a patched kernel and may stick in a partially started state. Which type of Jailbreaking is performed on it?

The official Application store for the Blackberry platform is ____________:

If an administrator is required to monitor and control mobile devices running on a corporate network, then which one of the following is the most appropriate solution?

How many layers are there in the architecture of IoT?

Which layer in IoT architecture is responsible for device and information management?

Which layer is responsible for Protocol translation and messaging?

An IoT device directly communicating with the application server is called ___________________.

An eavesdropper records the transmission and replays it at a later time to cause the receiver to ‘unlock’; this attack is known as ________________________.

IaaS Cloud Computing Service offers ______________.

_________ is an example of SaaS.

A cloud deployment model accessed by multiple parties having shared resources is known as a ________________________.

A person or organization that maintains a business relationship with and uses service from Cloud Providers is known as ________________________.

A person who negotiates the relationship between Cloud Provider and Consumer is called ________________________.

Symmetric Key Cryptography requires _______________.

AES and DES are examples of _________________.

The cipher that encrypts the plain text one by one is known as ________________________.

64-bit Block Size, 56-bit Key size, and 16 rounds are the parameters of ____________.

Digital Certificate’s “Subject” field shows ___________________.

RSA key length varies from _____________.

The message digest is used to ensure ___________.

MD5 produces a hash value of ________________________.

A cryptographic attack type where a cryptanalyst has access to a ciphertext but does not have access to the corresponding plaintext is called ________________________.

The most secure way to mitigate information theft from a laptop of an organization left in a public place is ________________________.

Select a wireless network detector that is popular in Linux OS.

Code injection is a type of attack in which a malicious user ________________________.

Jack is a programming contest judge. Before reaching him, the code is run through a restricted OS and tested there. If it passes, it will proceed to Jack. What is the name of this stage in the process?

The payment Card Industry Data Security Standard (PCI DSS) contains six different kinds of objectives. Each objective contains at least one requirement, which must be followed to achieve compliance. Select the following requirements that best fit under the objective, “Implement strong access control measures.”

Which is an NMAP script that might help detect HTTP methods such as GET, HEAD, POST, PUT, TRACE, and DELETE?

Which of the following is a process of recording, logging, and resolving events that take place in an organization?

Suppose an attacker has access to a Linux host and has stolen the password file form/passwd/etc. What can he do now?

Which of the following is a response for a NULL scan if the port is closed?

The Open Web Application Security Project (OWASP) is a worldwide not-for-benefit charitable organization concentrated on improving software security. What detail is the essential concern on OWASP’s Top Ten Project Most Critical Web Application Security Risks?

Select the NMAP command for OS detection

How would an attacker record all the shares to which the current user context has access when using CMD?

Where does PPTP encryption belong in the OSI model?

Suppose the binary values are XOR: 10110001, 00111010. The resultant binary value would be ________________________.

Select the resources NMAP needs to use as a basic vulnerability scanner covering numerous vectors like HTTP, SMB, and FTP.

During a recent security assessment, you determined that the organization has one Domain Name Server (DNS) in a Demilitarized Zone (DMZ) and another DNS server on the internal network. Which of the following type of DNS configuration is this?

Which of the following cryptographic hash functions can take an arbitrary length of input and produce a message digest output of 160 bits?

What is the main purpose of test automation in security testing?

Select the suitable programming language that is most vulnerable to buffer overflow attacks.

Calculate the approximate cost of replacement and recovery operation of a hard drive failure per year if the cost of a new hard drive is $300. A technician charges $10 per hour and needs 10 hours to repair the OS and software to the new hard disk. It will require a further 4 hours to repair the database from the last backup to the new hard disk. Calculate the SLE, ALE, and ARO. Assume the EF=1 (100%). What is the closest estimated cost of this replacement and recovery operation every year?

Assume you are the Director of Network Engineering. Your business is planning a significant expansion. Users connecting via analog modems, Digital Subscriber Lines (DSL), wireless data services, and Virtual Private Networks (VPN) over a Frame Relay network must be authenticated, according to the business. Which AAA protocol do you think you would use?

What kind of vulnerability/attack occurs when a malicious person forces the user’s browser to send an authenticated request to a server?

A network administrator received a security alert at 3.00 a.m. from the Intrusion Detection System (IDS). The alert was generated due to numerous incoming packets over ports 20 and 21. During analysis, there was no sign of an attack on the FTP servers. How should the administrator handle this situation?

SSL, PGP, and IKE are all examples of which kind of cryptography?

Which one of the following protocols does a smart card use in order to transfer the certificate in a secure manner?

The only way to defeat a multi-level security solution is to leak data via ________________.

Select the open-source tools that would be the best option to scan a network for potential targets.

What is the proper syntax when you want to do an ICMP scan on a remote computer using hping 2?

Select the suitable tools used to consider the files produced by several packet-capture programs such as WinDump, Wireshark, tcpdump, and EtherPeek.

Which protocols are used for setting up secured channels between two devices, typically in VPNs?

The establishment of a TCP connection contains a negotiation called three-way handshakes. What kind of message is initially sent by the client to the server to begin this negotiation?

Which of the following terms describes the amount of risk that remains after identifying vulnerabilities and their mitigation?

An attacker using a rogue wireless AP launches a MITM attack and injects an HTML code to embed a malicious applet in all HTTP connections. When users access any page, the applet runs and exploits many machines. Select the tool the hacker probably used to inject the HTML code.

Which of the following antenna is normally used in communications for a frequency band of 10 MHz to VHF and UHF?

Which of the following international standards establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

Which option would you use if you want to scan fewer ports than the default scan that uses the Nmap tool?

Which tool can be used for passive OS fingerprinting?

Select the tool that can scan a network to execute vulnerability checks and compliance auditing.

Which protocol and port number might be needed to send log messages to a log analysis tool that resides behind a firewall?

You have successfully gained access to a Linux server. You would like to guarantee that the succeeding outgoing traffic from this server will not be caught by a Network Based Intrusion Detection System (NIDS). What is the most effective technique to avoid NIDS?

A _________________ is a network device that monitors the radio spectrum for the presence of unauthorized access points and can automatically take countermeasures, such as denying these unauthorized access points to connect to the network.

Which of the following is a Windows command that a hacker can use to record all the shares to which the current user context has access?

Challenge/response authentication is used to prevent ________________________.

These hackers have limited or no training and only know how to use basic methods or tools. What kind of hackers are we talking about?

What is considered to be a brute force attack?

Which of the following is one of the most fundamental ways to prevent Cross-site Scripting (XSS) in software applications?