CEH-001 by GAQM Actual Free Exam Questions And Answers

Question 1

What is "Hacktivism"?

A. An association which groups activists

B. Hacking ruthlessly

C. Hacking for a cause

D. None of the above

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 2

Melissa is a virus that attacks Microsoft Windows platforms.
To which category does this virus belong?

A. Macro

B. Polymorphic

C. Boot Sector infector

D. System

Discussion 0

Correct Answer: A Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 3

What happens when one experiences a ping of death?

A. This is when an the IP header is set to 1 (ICMP) and the "type" field in the ICMP header is set to 5 (Redirect).

B. This is when an IP datagram is received with the "protocol" field in the IP header set to 1 (ICMP) and the "type" field in the ICMP header is set to 18 (Address Mask Reply).

C. This is when an IP datagram is received with the "protocol" field in the IP header set to 1 (ICMP), the Last Fragment bit is set, and (IP offset ' 8) + (IP data length) >65535. In other words, the IP offset (which represents the starting position of this fragment in the original packet, and which is in 8-byte units) plus the rest of the packet is greater than the maximum size for an IP packet.

D. This is when an IP datagram is received with the "protocol" field in the IP header set to 1 (ICMP) and the source equal to destination address.

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 4

Which of the following is the primary objective of a rootkit?

A. It opens a port to provide an unauthorized service

B. It creates a buffer overflow

C. It replaces legitimate programs

D. It provides an undocumented opening in a program

Discussion 0

Correct Answer: C Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 5

User which Federal Statutes does FBI investigate for computer crimes involving e-mail scams and mail fraud?

A. 18 U.S.C 1832 Trade Secrets Act

B. 18 U.S.C 1361 Injury to Government Property

C. 18 U.S.C 1029 Possession of Access Devices

D. 18 U.S.C 1362 Government communication systems

E. 18 U.S.C 1343 Fraud by wire, radio or television

F. 18 U.S.C 1831 Economic Espionage Act

G. 18 U.S.C 1030 Fraud and related activity in connection with computers

Discussion 0

Correct Answer: G Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 6

When Nmap performs a ping sweep, which of the following sets of requests does it send to the target device?

A. ICMP ECHO_REPLY & TFP RST

B. ICMP ECHO_REQUEST & TCP SYN

C. ICMP ECHO_REPLY & TCP FIN

D. ICMP ECHO_REQUEST & TCP ACK

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 7

While investigating a claim of a user downloading illegal material, the investigator goes through the files on the suspect's workstation. He comes across a file that is just called "file.txt" but when he opens it, he finds the following:

What can he infer from this file?

A. An encoded file

B. An encrypted file

C. A buffer overflow

D. A picture that has been renamed with a .txt extension

Discussion 0

Correct Answer: C Vote an answer

Question 8

Which of the following is an example of two factor authentication?

A. PIN Number and Birth Date

B. Digital Certificate and Hardware Token

C. Username and Password

D. Fingerprint and Smartcard ID

Discussion 0

Correct Answer: C Vote an answer

Question 9

One advantage of an application-level firewall is the ability to

A. filter specific commands, such as http:post.

B. monitor tcp handshaking.

C. filter packets at the network level.

D. retain state information for each packet.

Discussion 0

Correct Answer: A Vote an answer

Question 10

Bob has been hired to do a web application security test. Bob notices that the site is dynamic and must make use of a back end database. Bob wants to see if SQL Injection would be possible. What is the first character that Bob should use to attempt breaking valid SQL request?

A. Exclamation Mark

B. Semi Column

C. Single Quote

D. Double Quote

Discussion 0

Correct Answer: C Vote an answer

Question 11

Eric notices repeated probes to port 1080. He learns that the protocol being used is designed to allow a host outside of a firewall to connect transparently and securely through the firewall. He wonders if his firewall has been breached. What would be your inference?

A. Eric network has been penetrated by a firewall breach

B. Eric has a Wingate package providing FTP redirection on his network

C. The attacker is using the ICMP protocol to have a covert channel

D. Somebody is using SOCKS on the network to communicate through the firewall

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

Question 12

In this type of Man-in-the-Middle attack, packets and authentication tokens are captured using a sniffer. Once the relevant information is extracted, the tokens are placed back on the network to gain access.

A. Rainbow and Hash generation attack

B. Shoulder surfing attack

C. Token Injection Replay attacks

D. Dumpster diving attack

Discussion 0

Correct Answer: C Vote an answer

Question 13

What happens during a SYN flood attack?

A. TCP connection requests floods a target machine is flooded with randomized source address & ports for the TCP ports.

B. A TCP packet is received with both the SYN and the FIN bits set in the flags field.

C. A TCP packet is received with the FIN bit set but with no ACK bit set in the flags field.

D. A TCP SYN packet, which is a connection initiation, is sent to a target machine, giving the target host's address as both source and destination, and is using the same port on the target host as both source and destination.

Discussion 0

Correct Answer: A Vote an answer

Question 14

Which of the following keyloggers cannot be detected by anti-virus or anti-spyware products?

A. Covert keylogger

B. Stealth keylogger

C. Software keylogger

D. Hardware keylogger

Discussion 0

Correct Answer: D Vote an answer

Explanation: Only visible for Fast2test members. You can sign-up / login (it's free).

GAQM Certified Ethical Hacker (CEH) - CEH-001 Exam Practice Test

Contact Us

Useful Links

Latest Updated