Pass the GAQM Information Systems Security CPEH-001 Questions and answers with ExamsMirror

Which of the following program infects the system boot sector and the executable files at the same time?

In which of the following password protection technique, random strings of characters are added to the password before calculating their hashes?

You are looking for SQL injection vulnerability by sending a special character to web applications. Which of the following is the most useful for quick validation?

What is the purpose of a demilitarized zone on a network?

What type of vulnerability/attack is it when the malicious person forces the user’s browser to send an authenticated request to a server?

During the process of encryption and decryption, what keys are shared?

During the process of encryption and decryption, what keys are shared?

When conducting a penetration test, it is crucial to use all means to get all available information about the target network. One of the ways to do that is by sniffing the network. Which of the following cannot be performed by the passive network sniffing?

Your business has decided to add credit card numbers to the data it backs up to tape. Which of the

following represents the best practice your business should observe?

An attacker scans a host with the below command. Which three flags are set? (Choose three.)

#nmap –sX host.domain.com

Based on the below log, which of the following sentences are true?

Mar 1, 2016, 7:33:28 AM 10.240.250.23 – 54373 10.249.253.15 – 22 tcp_ip

Bob, your senior colleague, has sent you a mail regarding a deal with one of the clients. You are requested to accept the offer and you oblige. After 2 days. Bob denies that he had ever sent a mail. What do you want to ""know"" to prove yourself that it was Bob who had send a mail?

Which of the below hashing functions are not recommended for use?

What type of analysis is performed when an attacker has partial knowledge of inner-workings of the application?

Assume a business-crucial web-site of some company that is used to sell handsets to the customers worldwide. All the developed components are reviewed by the security team on a monthly basis. In order to drive business further, the web-site developers decided to add some 3rd party marketing tools on it. The tools are written in JavaScript and can track the customer’s activity on the site. These tools are located on the servers of the marketing company.

What is the main security risk associated with this scenario?

When a security analyst prepares for the formal security assessment - what of the following should be done in order to determine inconsistencies in the secure assets database and verify that system is compliant to the minimum security baseline?