Pass the GAQM Certified Ethical Hacker CEH CEH-001 Questions and answers with ExamsMirror

A pentester gains access to a Windows application server and needs to determine the settings of the built-in Windows firewall. Which command would be used?

Which of the following network attacks takes advantage of weaknesses in the fragment reassembly functionality of the TCP/IP protocol stack?

If an e-commerce site was put into a live environment and the programmers failed to remove the secret entry point that was used during the application development, what is this secret entry point known as?

The Open Web Application Security Project (OWASP) testing methodology addresses the need to secure web applications by providing which one of the following services?

What are common signs that a system has been compromised or hacked? (Choose three.)

What are the three types of authentication?

What results will the following command yielD. 'NMAP -sS -O -p 123-153 192.168.100.3'?

Which property ensures that a hash function will not produce the same hashed value for two different messages?

Which of the following is a client-server tool utilized to evade firewall inspection?

WPA2 uses AES for wireless data encryption at which of the following encryption levels?

Fingerprinting VPN firewalls is possible with which of the following tools?

Which of the following algorithms provides better protection against brute force attacks by using a 160-bit message digest?

Company A and Company B have just merged and each has its own Public Key Infrastructure (PKI). What must the Certificate Authorities (CAs) establish so that the private PKIs for Company A and Company B trust one another and each private PKI can validate digital certificates from the other company?

A botnet can be managed through which of the following?

What is the primary drawback to using advanced encryption standard (AES) algorithm with a 256 bit key to share sensitive data?

Which statement best describes a server type under an N-tier architecture?

Which of the following techniques does a vulnerability scanner use in order to detect a vulnerability on a target service?

A tester has been hired to do a web application security test. The tester notices that the site is dynamic and must make use of a back end database.

In order for the tester to see if SQL injection is possible, what is the first character that the tester should use to attempt breaking a valid SQL request?

Which of the following network attacks relies on sending an abnormally large packet size that exceeds TCP/IP specifications?

What is the best defense against privilege escalation vulnerability?