stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
Q241 - Q290 Flashcards | StudBud
Explore
/
Q241 - Q290
Q241 - Q290
50 terms
·
StudBud Administration
·
48 plays
Ceh
Flashcards
50 cards
F
Practice quiz
P
Host live
L
Questions
50
Answers
1
271. What is the process of logging, recording, and resolving events that take place in an organization?
Security Policy
Internal Procedure
Metrics
Incident Management Process
2
252. What command will help you to search files using Google as a search engine?
inurl: target.com filename:xls username password email
site: target.com filetype:xls username password email
domain: target.com archieve:xls username password email
site: target.com file:xls username password email
3
278. Which of the following organization is being described?
Institute of Electrical and Electronics Engineers(IEEE
Center for Disease Control (CDC)
Payment Card Industry (PCI)
International Security Industry Organization (ISIO)
4
241.What protocol used on Linux serves to synchronize the time has stopped working?
NTP
OSPF
TimeKeeper
PPP
5
247. what command would you type at the nslookup prompt to attempt a zone transfer?
Is –d accorp.local
Iserver 192.168.10.2 –t all
list domain=abccorp.local type=zone
list server=192.168.10.2 type=all
6
288.Which utility will tell you in real time which ports are listening or in another state?
Loki
Nmap
Netsat
TCPView
7
258. _______is to deny network access to local area networks and other information assets by unauthorized wirelessdevice
Wireless Analyzer
Wireless Jammer
Wireless Access Control List
Wireless Access Point
8
242.The "black box testing" methodology enforces what kind of restriction?
The internal operation of a system is only partly accessible to the tester.
Only the external operation of a system is accessible to the tester.
Only the internal operation of a system is known to the tester.
The internal operation of a system is completely known to the tester.
9
250. Which command-line utility are you most likely to use?
MS Excel
Grep
Notepad
Relational Database
10
261. What Web browser-based security vulnerability was exploited to compromise the user?
Cross-Site Scripting
Web form input validation
Cross-Site Request Forgery
Clickjacking
11
282. What is the best approach for discovering vulnerabilities on a Windows-based computer?
C
A
D
B
12
286
D
B
A
C
13
287
D
C
A
B
14
266. what river and library are required to allow the NIC to work in promiscous mode?
Winpsw
Winprom
Winpcap
Libpcap
15
268. What should the IS auditor do?
Create a procedures document
Conduct compliance testing
Terminate the audit
Identify and evaluate existing practices
16
283. . – 192.168.8.0/24. What command you would use?
wireshark –fetch “192.168.8/*”
wireshark –capture –local –masked 192.168.8.0 –range 24
sudo tshark –f “net 192.168.8.0/24”
tshark –net 192.255.255.255 mask 192.168.8.0
17
259. What does the –oX flag do in an Nmap scan?
Output the results in truncated format to the screen
Perform an eXpress scan
Output the results in XML format to a file
Perform an Xmas scan
18
290
B
D
C
A
19
243. >NMAP –sn 192.168.11.200-215 The NMAP command above performs which of the following?
An operating system detect
A ping scan
A port scan
A trace sweep
20
279. DoS tools is used to attack target web applications by starvation of available sessions on the web server?
MyDoom
Stacheldraht
R-U-Dead-Yet? (RUDY)
LOIC
21
249. You decide to extract metadata from these files and analyze it. What tool will help you with the task?
Armitage
cdpsnarf
Dmitry
Metagoofil
22
256.
Network Sniffer
Security Incident and Event Monitoring
Vulnerability Scanner
Intrusion Prevention Server
23
289
B
C
A
D
24
285
A
D
B
C
25
251. What is the most important phase of ethical hacking in which you need to spend a considerable amount of time?
gaining access
escalating privileges
network mapping
footprinting
26
270. What is the purpose of using “-sl” with Nmap?
Conduct ICMP scan
Conduct IDLE scan
Conduct silent scan
Conduct stealth scan
27
280. WPA2 uses AES for wireless data encryption at which of the following encryption levels?
128 bit and CRC
128 bit and CCMP
64 bit and CCMP
128 bi and TKIP
28
257. What is one of the first things you should do when given the job?
Establish attribution to suspected attackers
Start the wireshark application to start sniffing network traffic
Explain to the CIO that you cannot eliminate all risk, but you will be able
Interview all employees in the company to rule out possible insider threats
29
265. What item is the primary concern on OWASP’s Top Ten Project Most Critical Web Application Security Risks?
Cross Site Scripting
Cross Site Request Forgery
Injection
Path disclosure
30
267. What is the name of this technique to hide the code and extend analysis time?
Encryption
Steganography
Code encoding
Obfuscation
31
275. You are attempting to man-in-the-middle a session. Which protocol will allow you to guess a sequence number?
ICMP
UPX
UPD
TCP
32
269. alert tcp any any ->192.168.100.0/24 21 (msg:””FTP on the network!””;)
An Intrusion Detection System
A Router IPTable
A firewall IPTable
FTP Server rule
33
244. LDAP uses a ____ database structure instead of SQL’s ______ structure.
Hierarchical, Relational
Simple, Complex
Relational, Hierarchical
Strict, Abstract
34
276. What is a “Collision attack” in cryptography?
C
A
B
D
35
277. Which of the following is the successor of SSL?
GRE
RSA
IPSec
TLS
36
273. What is the closest approximate cost of this replacement and recovery operation per year?
$146
$440
$1320
$100
37
281. Which of the following IP addresses could be leased as a result of the new configuration?
10.1.255.200
10.1.4.156
10.1.4.254
10.1.5.200
38
246. Which of the following statements is FALSE with respect to Intrusion Detection Systems?
require constant update of the signature library
can easily distinguish a malicious payload in an encrypted traffic
can be configured to distinguish specific content in network packets
can examine the contents of the data in context of the network protocol
39
245. What is the purpose of DNS AAAA record?
Authorization, Authentication and Auditing record
Address prefix record
IPv6 address resolution record
Address database record
40
274. What should this employee do?
B
C
A
D
41
284
A
D
C
B
42
272. What type of firewall is inspecting outbound traffic?
Application
Packet Filtering
Circuit
Stateful
43
255. Risks=Threats x Vulnerabilities is referred to as the:
Threat assessment
Risk equation
Disaster recovery formula
BIA equation
44
253. Which port would you see listening on these Windows machines in the network?
3389
1433
161
445
45
254. Which of the following is assured by the use of a hash?
Availability
Authentication
Integrity
Confidentially
46
248. Which command can be used to show the current TCP/IP connections?
Netsh
Net use
Net use connection
Netstat
47
262. Which type of IDS is best suited for Tremp’s requirements?
Host-based IDS
Gateway-based IDS
Open source-based IDS
Network-based IDS
48
264. Which of the following is not a Bluetooth attack?
Bluesnarfing
Bluesmacking
Bluedriving
Bluejacking
49
263. Which of the following parameters describe LM Hash:
II
I, II, and III
I and II
I
50
260. During an Xmas scan, what indicates a port is closed?
ACK
RST
No return response
SYN
