QUESTION: 445

An organization hires a tester to do a wireless penetration test. Previous reports indicate that the last test did not contain management or control packets in the submitted traces.
Which of the following is the most likely reason for lack of management or control packets?

The wireless card was not turned on.
The wrong network card drivers were in use by Wireshark.
On Linux and Mac OS X, only 802.11 headers are received in promiscuous mode.
Certain operating systems and adapters do not collect the management or control packets.

Answer(s): D

Reveal Solution Next Question

QUESTION: 446

Which of the following techniques will identify if computer files have been changed?

Network sniffing
Permission sets
Integrity checking hashes
Firewall alerts

Answer(s): C

Reveal Solution Next Question

QUESTION: 447

Which of the following does proper basic configuration of snort as a network intrusion detection system require?

Limit the packets captured to the snort configuration file.
Capture every packet on the network segment.
Limit the packets captured to a single segment.
Limit the packets captured to the /var/log/snort directory.

Answer(s): A

Reveal Solution Next Question

QUESTION: 448

When analyzing the IDS logs, the system administrator notices connections from outside of the LAN have been sending packets where the Source IP address and Destination IP address are the same.

There have been no alerts sent via email or logged in the IDS.
Which type of an alert is this?

False positive
False negative
True positive
True negative

Answer(s): B

Reveal Solution Next Question

Free CPEH-001 Exam Braindumps (page: 112)

QUESTION: 445

QUESTION: 446

QUESTION: 447

QUESTION: 448