CEH-001 Certification Exam Questions with AI Explanations

QUESTION: 161 Topic: 2, Volume B

A digital signature is simply a message that is encrypted with the public key instead of the private key.

true
false

Answer(s): B

QUESTION: 162 Topic: 2, Volume B

Blane is a network security analyst for his company. From an outside IP, Blane performs an XMAS scan using Nmap. Almost every port scanned does not illicit a response. What can he infer from this kind of response?

These ports are open because they do not illicit a response.
He can tell that these ports are in stealth mode.
If a port does not respond to an XMAS scan using NMAP, that port is closed.
The scan was not performed correctly using NMAP since all ports, no matter what their state, will illicit some sort of response from an XMAS scan.

Answer(s): A

Reveal Solution Next Question

QUESTION: 163 Topic: 2, Volume B

In TCP communications there are 8 flags; FIN, SYN, RST, PSH, ACK, URG, ECE, CWR.
These flags have decimal numbers assigned to them:

FIN = 1
SYN = 2
RST = 4
PSH = 8
ACK = 16
URG = 32
ECE = 64
CWR =128

Example: To calculate SYN/ACK flag decimal value, add 2 (which is the decimal value of
the SYN flag) to 16 (which is the decimal value of the ACK flag), so the result would be 18.
Based on the above calculation, what is the decimal value for XMAS scan?

Answer(s): C

Reveal Solution Next Question

QUESTION: 164 Topic: 2, Volume B

A simple compiler technique used by programmers is to add a terminator 'canary word' containing four letters NULL (0x00), CR (0x0d), LF (0x0a) and EOF (0xff) so that most string operations are terminated. If the canary word has been altered when the function returns, and the program responds by emitting an intruder alert into syslog, and then halts what does it indicate?

A buffer overflow attack has been attempted
A buffer overflow attack has already occurred
A firewall has been breached and this is logged
An intrusion detection system has been triggered
The system has crashed

Answer(s): A

Reveal Solution Next Question

QUESTION: 165 Topic: 2, Volume B

This is an example of whois record.

Sometimes a company shares a little too much information on their organization through public domain records. Based on the above whois record, what can an attacker do? (Select 2 answers)

Search engines like Google, Bing will expose information listed on the WHOIS record
An attacker can attempt phishing and social engineering on targeted individuals using the information from WHOIS record
Spammers can send unsolicited e-mails to addresses listed in the WHOIS record
IRS Agents will use this information to track individuals using the WHOIS record information

Answer(s): B,C

Reveal Solution Next Question

GAQM Certified Ethical Hacker (CEH) CEH-001 Exam Questions in PDF

Free GAQM CEH-001 Dumps Questions (page: 33)

QUESTION: 161 Topic: 2, Volume B

QUESTION: 162 Topic: 2, Volume B

QUESTION: 163 Topic: 2, Volume B

QUESTION: 164 Topic: 2, Volume B

QUESTION: 165 Topic: 2, Volume B