Online Access Free CEH-001 Practice Test

You have been called to investigate a sudden increase in network traffic at XYZ. It seems that the traffic generated was too heavy that normal business functions could no longer be rendered to external employees and clients. After a quick investigation, you find that the computer has services running attached to TFN2k and Trinoo software. What do you think was the most likely cause behind this sudden increase in traffic?

• A.A distributed denial of service attack.
• B.A network card that was jabbering.
• C.A bad route on the firewall.
• D.Invalid rules entry at the gateway.

When discussing passwords, what is considered a brute force attack?

• A.You threaten to use the rubber hose on someone unless they reveal their password
• B.You load a dictionary of words into your cracking program
• C.You attempt every single possibility until you exhaust all possible combinations or discover the password
• D.You wait until the password expires
• E.You create hashes of a large number of words and compare it with the encrypted passwords

Every company needs a formal written document which spells out to employees precisely what they are allowed to use the company's systems for, what is prohibited, and what will happen to them if they break the rules. Two printed copies of the policy should be given to every employee as soon as possible after they join the organization. The employee should be asked to sign one copy, which should be safely filed by the company. No one should be allowed to use the company's computer systems until they have signed the policy in acceptance of its terms. What is this document called?

• A.Company Compliance Policy (CCP)
• B.Information Audit Policy (IAP)
• C.Penetration Testing Policy (PTP)
• D.Information Security Policy (ISP)

You have hidden a Trojan file virus.exe inside another file readme.txt using NTFS streaming.
Which command would you execute to extract the Trojan to a standalone file?

• A.c:\> more readme.txt | virus.exe > virus.exe
• B.c:\> cat readme.txt:virus.exe > virus.exe
• C.c:\> type readme.txt:virus.exe > virus.exe
• D.c:\> list redme.txt$virus.exe > virus.exe

In Buffer Overflow exploit, which of the following registers gets overwritten with return address of the exploit code?

• A.EEP
• B.EIP
• C.ESP
• D.EAP