ECCouncil Certified Ethical Hacker Exam (CEHv13) Sample Questions:
1. Hackers often raise the trust level of a phishing message by modeling the email to look similar to the internal email used by the target company. This includes using logos, formatting, and names of the target company.
The phishing message will often use the name of the company CEO, President, or Managers. The time a hacker spends performing research to locate this information about a company is known as?
A) Enumeration
B) Reconnaissance
C) Investigation
D) Exploration
2. What is the algorithm used by LM for Windows 2000 SAM?
A) DES
B) MD4
C) SHA
D) SSL
3. Which type of attack attempts to overflow the content-addressable memory (CAM) table in an Ethernet switch?
A) Evil twin attack
B) MAC flooding
C) DNS cache flooding
D) DDoS attack
4. What would be the purpose of running "wget 192.168.0.15 -q -S" against a web server?
A) Performing content enumeration on the web server to discover hidden folders
B) Downloading all the contents of the web page locally for further examination
C) Using wget to perform banner grabbing on the web server
D) Flooding the web server with requests to perform a DoS attack
5. In the process of implementing a network vulnerability assessment strategy for a tech company, the security analyst is confronted with the following scenarios:
1) A legacy application is discovered on the network, which no longer receives updates from the vendor.
2) Several systems in the network are found running outdated versions of web browsers prone to distributed attacks.
3) The network firewall has been configured using default settings and passwords.
4) Certain TCP/IP protocols used in the organization are inherently insecure.
The security analyst decides to use vulnerability scanning software. Which of the following limitations of vulnerability assessment should the analyst be most cautious about in this context?
A) Vulnerability scanning software is limited in its ability to detect vulnerabilities at a given point in time
B) Vulnerability scanning software cannot define the impact of an identified vulnerability on different business operations
C) Vulnerability scanning software is limited in its ability to perform live tests on web applications to detect errors or unexpected behavior
D) Vulnerability scanning software is not immune to software engineering flaws that might lead to serious vulnerabilities being missed
Solutions:
| Question # 1 Answer: B | Question # 2 Answer: A | Question # 3 Answer: B | Question # 4 Answer: C | Question # 5 Answer: D |
952 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
