CEH-001 Certification Exam Questions with AI Explanations

QUESTION: 121 Topic: 2, Volume B

In this type of Man-in-the-Middle attack, packets and authentication tokens are captured using a sniffer. Once the relevant information is extracted, the tokens are placed back on the network to gain access.

Token Injection Replay attacks
Shoulder surfing attack
Rainbow and Hash generation attack
Dumpster diving attack

Answer(s): A

Reveal Solution Next Question

QUESTION: 122 Topic: 2, Volume B

The FIN flag is set and sent from host A to host B when host A has no more data to transmit (Closing a TCP connection). This flag releases the connection resources. However, host A can continue to receive data as long as the SYN sequence numbers of transmitted packets from host B are lower than the packet segment containing the set FIN flag.

false
true

Answer(s): B

Reveal Solution Next Question

QUESTION: 123 Topic: 2, Volume B

Jason is the network administrator of Spears Technology. He has enabled SNORT IDS to detect attacks going through his network. He receives Snort SMS alerts on his iPhone whenever there is an attempted intrusion to his network.
He receives the following SMS message during the weekend.

An attacker Chew Siew sitting in Beijing, China had just launched a remote scan on Jason's network with the hping command.
Which of the following hping2 command is responsible for the above snort alert?

chenrocks:/home/siew # hping -S -R -P -A -F -U 192.168.2.56 -p 22 -c 5 -t 118
chenrocks:/home/siew # hping -F -Q -J -A -C -W 192.168.2.56 -p 22 -c 5 -t 118
chenrocks:/home/siew # hping -D -V -R -S -Z -Y 192.168.2.56 -p 22 -c 5 -t 118
chenrocks:/home/siew # hping -G -T -H -S -L -W 192.168.2.56 -p 22 -c 5 -t 118

Answer(s): A

Reveal Solution Next Question

QUESTION: 124 Topic: 2, Volume B

Leesa is the senior security analyst for a publicly traded company. The IT department recently rolled out an intranet for company use only with information ranging from training, to holiday schedules, to human resources data. Leesa wants to make sure the site is not accessible from outside and she also wants to ensure the site is Sarbanes-Oxley (SOX) compliant. Leesa goes to a public library as she wants to do some Google searching to verify whether the company's intranet is accessible from outside and has been indexed by Google. Leesa wants to search for a website title of "intranet" with part of the URL containing the word "intranet" and the words "human resources" somewhere in the webpage.
What Google search will accomplish this?

related:intranet allinurl:intranet:"human resources"
cache:"human resources" inurl:intranet(SharePoint)
intitle:intranet inurl:intranet+intext:"human resources"
site:"human resources"+intext:intranet intitle:intranet

Answer(s): C

Reveal Solution Next Question

QUESTION: 125 Topic: 2, Volume B

Bob has been hired to do a web application security test. Bob notices that the site is dynamic and must make use of a back end database. Bob wants to see if SQL Injection would be possible. What is the first character that Bob should use to attempt breaking valid SQL request?

Semi Column
Double Quote
Single Quote
Exclamation Mark

Answer(s): C

Reveal Solution Next Question

GAQM Certified Ethical Hacker (CEH) CEH-001 Dumps in PDF

Free GAQM CEH-001 Real Questions (page: 25)

QUESTION: 121 Topic: 2, Volume B

QUESTION: 122 Topic: 2, Volume B

QUESTION: 123 Topic: 2, Volume B

QUESTION: 124 Topic: 2, Volume B

QUESTION: 125 Topic: 2, Volume B