Online Access Free CPEH-001 Practice Test

You have performed the traceroute below and notice that hops 19 and 20 both show the same IP address. What can be inferred from this output?

• A.A Honeypot
• B.An application proxy firewall
• C.A host based IDS
• D.A stateful inspection firewall

While performing a ping sweep of a subnet you receive an ICMP reply of Code 3/Type 13 for all the pings sent out. What is the most likely cause behind this response?

• A.The host does not respond to ICMP packets.
• B.A router is blocking ICMP.
• C.An in-line IDS is dropping the packets.
• D.The firewall is dropping the packets.

You have retrieved the raw hash values from a Windows 2000 Domain Controller. Using social engineering, you come to know that they are enforcing strong passwords. You understand that all users are required to use passwords that are at least 8 characters in length. All passwords must also use 3 of the 4 following categories: lower case letters, capital letters, numbers and special characters. With your existing knowledge of users, likely user account names and the possibility that they will choose the easiest passwords possible, what would be the fastest type of password cracking attack you can run against these hash values and still get results?

• A.Brute Force Attack
• B.Hybrid Attack
• C.Online Attack
• D.Dictionary Attack

You are conducting a port scan on a subnet that has ICMP blocked. You have discovered 23 live systems and after scanning each of them you notice that they all show port 21 in closed state. What should be the next logical step that should be performed?

• A.Connect to open ports to discover applications.
• B.Perform a ping sweep to identify any additional systems that might be up.
• C.Perform a SYN scan on port 21 to identify any additional systems that might be up.
• D.Rescan every computer to verify the results.

Attackers can potentially intercept and modify unsigned SMB packets, modify the traffic and forward it so that the server might perform undesirable actions. Alternatively, the attacker could pose as the server or client after a legitimate authentication and gain unauthorized access to data. Which of the following is NOT a means that can be used to minimize or protect against such an attack?

• A.File permissions
• B.Timestamps
• C.SMB Signing
• D.Sequence numbers monitoring