QUESTION: 277 Topic: 3, Volume C

A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted.

Which cryptography attack is the student attempting?

Man-in-the-middle attack
Brute-force attack
Dictionary attack
Session hijacking

Answer(s): C

Reveal Solution Next Question

QUESTION: 278 Topic: 3, Volume C

A hacker, who posed as a heating and air conditioning specialist, was able to install a sniffer program in a switched environment network. Which attack could the hacker use to sniff all of the packets in the network?

Fraggle
MAC Flood
Smurf
Tear Drop

Answer(s): B

Reveal Solution Next Question

QUESTION: 279 Topic: 3, Volume C

Which of the following conditions must be given to allow a tester to exploit a Cross-Site Request Forgery (CSRF) vulnerable web application?

The victim user must open the malicious link with an Internet Explorer prior to version 8.
The session cookies generated by the application do not have the HttpOnly flag set.
The victim user must open the malicious link with a Firefox prior to version 3.
The web application should not use random tokens.

Answer(s): D

Reveal Solution Next Question

QUESTION: 280 Topic: 3, Volume C

During a wireless penetration test, a tester detects an access point using WPA2 encryption.
Which of the following attacks should be used to obtain the key?

The tester must capture the WPA2 authentication handshake and then crack it.
The tester must use the tool inSSIDer to crack it using the ESSID of the network.
The tester cannot crack WPA2 because it is in full compliance with the IEEE 802.11i standard.
The tester must change the MAC address of the wireless network card and then use the AirTraf tool to obtain the key.

Answer(s): A

Reveal Solution Next Question

Free CEH-001 Exam Braindumps (page: 71)

QUESTION: 277 Topic: 3, Volume C

QUESTION: 278 Topic: 3, Volume C

QUESTION: 279 Topic: 3, Volume C

QUESTION: 280 Topic: 3, Volume C

CEH-001 Discussions & Posts