Online Access Free CEH-001 Practice Test

Which NMAP command combination would let a tester scan every TCP port from a class C network that is blocking ICMP with fingerprinting and service detection?

• A.NMAP -P0 -A -O -p1-65535 192.168.0/24
• B.NMAP -P0 -A -sT -p0-65535 192.168.0/16
• C.NMAP -PN -A -O -sS 192.168.2.0/24
• D.NMAP -PN -O -sS -p 1-1024 192.168.0/8

What is the disadvantage of an automated vulnerability assessment tool?

• A.Prone to false negatives
• B.Ineffective
• C.Prone to false positives
• D.Noisy
• E.Slow

This tool is widely used for ARP Poisoning attack. Name the tool.

• A.Webarp Infector
• B.Beat Infector
• C.Cain and Able
• D.Poison Ivy

The programmers on your team are analyzing the free, open source software being used to run FTP services on a server. They notice that there is an excessive number of fgets() and gets() on the source code. These C++ functions do not check bounds.
What kind of attack is this program susceptible to?

• A.Password Attack
• B.Buffer of Overflow
• C.Shatter Attack
• D.Denial of Service

Attacking well-known system defaults is one of the most common hacker attacks. Most software is shipped with a default configuration that makes it easy to install and setup the application. You should change the default settings to secure the system.
Which of the following is NOT an example of default installation?

• A.Often, the default location of installation files can be exploited which allows a hacker to retrieve a file from the system
• B.Enabling firewall and anti-virus software on the local system
• C.Many software packages come with "samples" that can be exploited, such as the sample programs on IIS web services
• D.Many systems come with default user accounts with well-known passwords that administrators forget to change