CPEH-001 Certification Exam Questions with AI Explanations

QUESTION: 141

In which location, SAM hash passwords are stored in Windows 7?

c:\windows\system32\config\SAM
c:\winnt\system32\machine\SAM
c:\windows\etc\drivers\SAM
c:\windows\config\etc\SAM

Answer(s): A

File extensions provide information regarding the underlying server technology. Attackers can use this information to search vulnerabilities and launch attacks. How would you disable file extensions in Apache servers?

Use disable-eXchange
Use mod_negotiation
Use Stop_Files
Use Lib_exchanges

Answer(s): B

Reveal Solution Next Question

QUESTION: 143

Bob has a good understanding of cryptography, having worked with it for many years. Cryptography is used to secure data from specific threats, but it does not secure the application from coding errors. It can provide data privacy; integrity and enable strong authentication but it cannot mitigate programming errors.
What is a good example of a programming error that Bob can use to explain to the management how encryption will not address all their security concerns?

Bob can explain that using a weak key management technique is a form of programming error
Bob can explain that using passwords to derive cryptographic keys is a form of a programming error
Bob can explain that a buffer overflow is an example of programming error and it is a common mistake associated with poor programming technique
Bob can explain that a random number generator can be used to derive cryptographic keys but it uses a weak seed value and this is a form of a programming error

Answer(s): A

Reveal Solution Next Question

QUESTION: 144

Finding tools to run dictionary and brute forcing attacks against FTP and Web servers is an easy task for hackers. They use tools such as arhontus or brutus to break into remote servers.

A command such as this, will attack a given 10.0.0.34 FTP and Telnet servers simultaneously with a list of passwords and a single login namE. linksys. Many FTP-specific password-guessing tools are also available from major security sites.
What defensive measures will you take to protect your network from these attacks?

Never leave a default password
Never use a password that can be found in a dictionary
Never use a password related to your hobbies, pets, relatives, or date of birth.
Use a word that has more than 21 characters from a dictionary as the password
Never use a password related to the hostname, domain name, or anything else that can be found with whois

Answer(s): A,B,C,E

Reveal Solution Next Question

QUESTION: 145

One of the most common and the best way of cracking RSA encryption is to begin to derive the two prime numbers, which are used in the RSA PKI mathematical process. If the two numbers p and q are discovered through a _____________ process, then the private key can be derived.

Factorization
Prime Detection
Hashing
Brute-forcing

Answer(s): A

Reveal Solution Next Question

GAQM Certified Professional Ethical Hacker (CPEH) Exam CPEH-001 Exam Questions in PDF

Free GAQM CPEH-001 Dumps Questions (page: 29)

QUESTION: 141

QUESTION: 142

QUESTION: 143

QUESTION: 144

QUESTION: 145