CPEH-001問題集、GAQM実際の試験問題

質問 1

The FIN flag is set and sent from host A to host B when host A has no more data to transmit (Closing a TCP connection). This flag releases the connection resources. However, host A can continue to receive data as long as the SYN sequence numbers of transmitted packets from host B are lower than the packet segment containing the set FIN flag.

A. false

B. true

正解: B

質問 2

A Trojan horse is a destructive program that masquerades as a benign application. The software initially appears to perform a desirable function for the user prior to installation and/or execution, but in addition to the expected function steals information or harms the system.

The challenge for an attacker is to send a convincing file attachment to the victim, which gets easily executed on the victim machine without raising any suspicion. Today's end users are quite knowledgeable about malwares and viruses. Instead of sending games and fun executables, Hackers today are quite successful in spreading the Trojans using Rogue security software. What is Rogue security software?

A. A Fake AV program that claims to rid a computer of malware, but instead installs spyware or other malware onto the computer. This kind of software is known as rogue security software.

B. A flash file extension to Firefox that gets automatically installed when a victim visits rogue software disabling websites

C. This software disables firewalls and establishes reverse connecting tunnel between the victim's machine and that of the attacker

D. Rogue security software is based on social engineering technique in which the attackers lures victim to visit spear phishing websites

正解: A

質問 3

What sequence of packets is sent during the initial TCP three-way handshake?

A. FIN, FIN-ACK, ACK

B. SYN, SYN-ACK, ACK

C. SYN, ACK, SYN-ACK

D. SYN, URG, ACK

正解: B

質問 4

A Buffer Overflow attack involves:

A. Flooding the target network buffers with data traffic to reduce the bandwidth available to legitimate users

B. Poorly written software that allows an attacker to execute arbitrary code on a target system

C. Using a trojan program to direct data traffic to the target host's memory stack

D. Using a dictionary to crack password buffers by guessing user names and passwords

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 5

Yancey is a network security administrator for a large electric company. This company provides power for over 100, 000 people in Las Vegas. Yancey has worked for his company for over 15 years and has become very successful. One day, Yancey comes in to work and finds out that the company will be downsizing and he will be out of a job in two weeks. Yancey is very angry and decides to place logic bombs, viruses, Trojans, and backdoors all over the network to take down the company once he has left. Yancey does not care if his actions land him in jail for 30 or more years, he just wants the company to pay for what they are doing to him. What would Yancey be considered?

A. Yancey is a Hacktivist Hacker since he is standing up to a company that is downsizing

B. Because Yancey works for the company currently; he would be a White Hat

C. Since he does not care about going to jail, he would be considered a Black Hat

D. Yancey would be considered a Suicide Hacker

正解: D

質問 6

Diffie-Hellman (DH) groups determine the strength of the key used in the key exchange process. Which of the following is the correct bit size of the Diffie-Hellman (DH) group 5?

A. 2048 bit key

B. 1025 bit key

C. 768 bit key

D. 1536 bit key

正解: D

質問 7

The following is a sample of output from a penetration tester's machine targeting a machine with the IP address of 192.168.1.106:

What is most likely taking place?

A. Ping sweep of the 192.168.1.106 network

B. Port scan of 192.168.1.106

C. Denial of service attack on 192.168.1.106

D. Remote service brute force attempt

正解: D

質問 8

Which of the following LM hashes represents a password of less than 8 characters?

A. B757BF5C0D87772FAAD3B435B51404EE

B. CEC52EB9C8E3455DC2265B23734E0DAC

C. E52CAC67419A9A224A3B108F3FA6CB6D

D. 44EFCE164AB921CQAAD3B435B51404EE

E. 0182BD0BD4444BF836077A718CCDF409

F. BA810DBA98995F1817306D272A9441BB

正解: A,F

質問 9

The use of alert thresholding in an IDS can reduce the volume of repeated alerts, but introduces which of the following vulnerabilities?

A. Thresholding interferes with the IDS' ability to reassemble fragmented packets.

B. An attacker, working slowly enough, can evade detection by the IDS.

C. Network packets are dropped if the volume exceeds the threshold.

D. The IDS will not distinguish among packets originating from different sources.

正解: B

質問 10

To reduce the attack surface of a system, administrators should perform which of the following processes to remove unnecessary software, services, and insecure configuration settings?

A. Harvesting

B. Hardening

C. Stealthing

D. Windowing

正解: B

質問 11

While examining a log report you find out that an intrusion has been attempted by a machine whose IP address is displayed as 0xde.0xad.0xbe.0xef. It looks to you like a hexadecimal number. You perform a ping 0xde.0xad.0xbe.0xef. Which of the following IP addresses will respond to the ping and hence will likely be responsible for the intrusion?

A. 10.0.3.4

B. 222.273.290.239

C. 203.20.4.5

D. 192.10.25.9

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 12

A Security Engineer at a medium-sized accounting firm has been tasked with discovering how much information can be obtained from the firm's public facing web servers. The engineer decides to start by using netcat to port 80.
The engineer receives this output:
HTTP/1.1 200 OK
Server: Microsoft-IIS/6
Expires: Tue, 17 Jan 2011 01:41:33 GMT
DatE. Mon, 16 Jan 2011 01:41:33 GMT
Content-TypE. text/html
Accept-Ranges: bytes
Last-ModifieD. Wed, 28 Dec 2010 15:32:21 GMT
ETaG. "b0aac0542e25c31:89d"
Content-Length: 7369
Which of the following is an example of what the engineer performed?

A. Whois database query

B. Banner grabbing

C. Cross-site scripting

D. SQL injection

正解: B

質問 13

In order to attack a wireless network, you put up an access point and override the signal of the real access point. As users send authentication data, you are able to capture it. What kind of attack is this?

A. War Chalking

B. Rouge access point attack

C. Unauthorized access point attack

D. WEP attack

正解: B

解説: (PassTest メンバーにのみ表示されます)

質問 14

Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results? TCP port 21 - no response TCP port 22 - no response TCP port 23 - Time-to-live exceeded

A. The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host.

B. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.

C. The lack of response from ports 21 and 22 indicate that those services are not running on the destination server.

D. The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error.

正解: B

GAQM Certified Professional Ethical Hacker (CPEH) - CPEH-001 模擬練習