GAQM CPEH-001 Exam Questions Free Practice Test

Viewing page 8 out of 15 pages

Viewing questions 106-120 out of questions

Questions # 106:

Which of these options is the most secure procedure for storing backup tapes?

Options:

In a climate controlled facility offsite

On a different floor in the same building

Inside the data center for faster retrieval in a fireproof safe

In a cool dry environment

Expert Solution

Questions # 107:

The establishment of a TCP connection involves a negotiation called 3 way handshake. What type of message sends the client to the server in order to begin this negotiation?

Options:

RST

ACK

SYN-ACK

SYN

Expert Solution

Questions # 108:

A company's security policy states that all Web browsers must automatically delete their HTTP browser cookies upon terminating. What sort of security breach is this policy attempting to mitigate?

Options:

Attempts by attackers to access Web sites that trust the Web browser user by stealing the user's authentication credentials.

Attempts by attackers to access the user and password information stored in the company's SQL database.

Attempts by attackers to access passwords stored on the user's computer without the user's knowledge.

Attempts by attackers to determine the user's Web browser usage patterns, including when sites were visited and for how long.

Expert Solution

Questions # 109:

Which of the following Nmap commands will produce the following output?

Output:

Question # 109

Options:

nmap -sN -Ps -T4 192.168.1.1

nmap -sT -sX -Pn -p 1-65535 192.168.1.1

nmap -sS -Pn 192.168.1.1

nmap -sS -sU -Pn -p 1-65535 192.168.1.1

Expert Solution

Questions # 110:

The "black box testing" methodology enforces which kind of restriction?

Options:

Only the external operation of a system is accessible to the tester.

Only the internal operation of a system is known to the tester.

The internal operation of a system is only partly accessible to the tester.

The internal operation of a system is completely known to the tester.

Expert Solution

Questions # 111:

Which of the following is one of the most effective ways to prevent Cross-site Scripting (XSS) flaws in software applications?

Options:

Validate and escape all information sent to a server

Use security policies and procedures to define and implement proper security settings

Verify access right before allowing access to protected information and UI controls

Use digital certificates to authenticate a server prior to sending data

Expert Solution

Questions # 112:

Which Metasploit Framework tool can help penetration tester for evading Anti-virus Systems?

Options:

msfpayload

msfcli

msfencode

msfd

Expert Solution

Questions # 113:

Which of the following programming languages is most susceptible to buffer overflow attacks, due to its lack of a built-in-bounds checking mechanism?

Question # 113

Output:

Segmentation fault

Options:

Python

Java

C++

Expert Solution

Questions # 114:

What is the difference between the AES and RSA algorithms?

Options:

Both are asymmetric algorithms, but RSA uses 1024-bit keys.

RSA is asymmetric, which is used to create a public/private key pair; AES is symmetric, which is used to encrypt data.

Both are symmetric algorithms, but AES uses 256-bit keys.

AES is asymmetric, which is used to create a public/private key pair; RSA is symmetric, which is used to encrypt data.

Expert Solution

Questions # 115:

The chance of a hard drive failure is once every three years. The cost to buy a new hard drive is $300. It will require 10 hours to restore the OS and software to the new hard disk. It will require a further 4 hours to restore the database from the last backup to the new hard disk. The recovery person earns $10/hour. Calculate the SLE, ARO, and ALE. Assume the EF = 1 (100%).

What is the closest approximate cost of this replacement and recovery operation per year?

Options:

$146

$1320

$440

$100

Expert Solution

Questions # 116:

The "gray box testing" methodology enforces what kind of restriction?

Options:

The internal operation of a system is only partly accessible to the tester.

The internal operation of a system is completely known to the tester.

Only the external operation of a system is accessible to the tester.

Only the internal operation of a system is known to the tester.

Expert Solution

Questions # 117:

In order to have an anonymous Internet surf, which of the following is best choice?

Options:

Use SSL sites when entering personal information

Use Tor network with multi-node

Use shared WiFi

Use public VPN

Expert Solution

Questions # 118:

Look at the following output. What did the hacker accomplish?

Question # 118

Options:

The hacker used whois to gather publicly available records for the domain.

The hacker used the "fierce" tool to brute force the list of available domains.

The hacker listed DNS records on his own domain.

The hacker successfully transferred the zone and enumerated the hosts.

Expert Solution

Questions # 119:

Which of the following types of firewalls ensures that the packets are part of the established session?

Options:

Stateful inspection firewall

Circuit-level firewall

Application-level firewall

Switch-level firewall

Expert Solution

Questions # 120:

The company ABC recently contracted a new accountant. The accountant will be working with the financial statements. Those financial statements need to be approved by the CFO and then they will be sent to the accountant but the CFO is worried because he wants to be sure that the information sent to the accountant was not modified once he approved it. What of the following options can be useful to ensure the integrity of the data?

Options:

The document can be sent to the accountant using an exclusive USB for that document.

The CFO can use a hash algorithm in the document once he approved the financial statements.

The financial statements can be sent twice, one by email and the other delivered in USB and the accountant can compare both to be sure it is the same document.

The CFO can use an excel file with a password.

Expert Solution

Viewing page 8 out of 15 pages

Viewing questions 106-120 out of questions

Pass the GAQM Information Systems Security CPEH-001 Questions and answers with CertsForce