Online Access Free CPEH-001 Practice Test

What technique is used to perform a Connection Stream Parameter Pollution (CSPP) attack?

• A.Inserting malicious Javascript code into input parameters
• B.Injecting parameters into a connection string using semicolons as a separator
• C.Adding multiple parameters with the same name in HTTP requests
• D.Setting a user's session identifier (SID) to an explicit known value

During the intelligence gathering phase of a penetration test, you come across a press release by a security products vendor stating that they have signed a multi-million dollar agreement with the company you are targeting. The contract was for vulnerability assessment tools and network based IDS systems. While researching on that particular brand of IDS you notice that its default installation allows it to perform sniffing and attack analysis on one NIC and caters to its management and reporting on another NIC. The sniffing interface is completely unbound from the TCP/IP stack by default. Assuming the defaults were used, how can you detect these sniffing interfaces?

• A.The sniffing interface cannot be detected.
• B.Set your IP to that of the IDS and look for it as it attempts to knock your computer off the network.
• C.Send your attack traffic and look for it to be dropped by the IDS.
• D.Use a ping flood against the IP of the sniffing NIC and look for latency in the responses.

What are the differences between SSL and S-HTTP?

• A.SSL operates at the application layer and S-HTTP operates at the network layer
• B.SSL operates at the transport layer and S-HTTP operates at the application layer
• C.SSL operates at the application layer and S-HTTP operates at the transport layer
• D.SSL operates at the network layer and S-HTTP operates at the application layer

If you receive a RST packet while doing an ACK scan, it indicates that the port is open.(True/False).

• A.False
• B.True

This tool is widely used for ARP Poisoning attack. Name the tool.

• A.Beat Infector
• B.Cain and Able
• C.Poison Ivy
• D.Webarp Infector