Which of the following programs is usually targeted at Microsoft Office products?

Answer(s): C

What is the main difference between a "Normal" SQL Injection and a "Blind" SQL Injection vulnerability?

The request to the web server is not visible to the administrator of the vulnerable application.
The attack is called "Blind" because, although the application properly filters user input, it is still vulnerable to code injection.
The successful attack does not show an error message to the administrator of the affected application.
The vulnerable application does not display errors with information about the injection results to the attacker.

Answer(s): D

Which of the following ensures that updates to policies, procedures, and configurations are made in a controlled and documented fashion?

Answer(s): C

Data hiding analysis can be useful in

determining the level of encryption used to encrypt the data.
detecting and recovering data that may indicate knowledge, ownership or intent.
identifying the amount of central processing unit (cpu) usage over time to process the data.
preventing a denial of service attack on a set of enterprise servers to prevent users from accessing the data.

Answer(s): B

Free CEH-001 Exam Braindumps (page: 83)