QUESTION: 49

You want to hide a secret.txt document inside c:\windows\system32\tcpip.dll kernel library using ADS streams. How will you accomplish this?

copy secret.txt c:\windows\system32\tcpip.dll kernel>secret.txt
copy secret.txt c:\windows\system32\tcpip.dll:secret.txt
copy secret.txt c:\windows\system32\tcpip.dll |secret.txt
copy secret.txt >< c:\windows\system32\tcpip.dll kernel secret.txt

Answer(s): B

Reveal Solution Next Question

You just purchased the latest DELL computer, which comes pre-installed with Windows 7, McAfee antivirus software and a host of other applications. You want to connect Ethernet wire to your cable modem and start using the computer immediately. Windows is dangerously insecure when unpacked from the box, and there are a few things that you must do before you use it.

New installation of Windows should be patched by installing the latest service packs and hotfixes
Key applications such as Adobe Acrobat, Macromedia Flash, Java, Winzip etc., must have the latest security patches installed
Install a personal firewall and lock down unused ports from connecting to your computer
Install the latest signatures for Antivirus software
Configure "Windows Update" to automatic
Create a non-admin user with a complex password and logon to this account
You can start using your computer as vendors such as DELL, HP and IBM would have already installed the latest service packs.

Answer(s): A,C,D,E,F

Reveal Solution Next Question

QUESTION: 51

In the context of Trojans, what is the definition of a Wrapper?

An encryption tool to protect the Trojan
A tool used to bind the Trojan with a legitimate file
A tool used to calculate bandwidth and CPU cycles wasted by the Trojan
A tool used to encapsulate packets within a new header and footer

Answer(s): B

Explanation:

Wrapper does not change header or footer of any packets but it mix between legitimate file and

Trojan file.

Reveal Solution Next Question

QUESTION: 52

Your computer is infected by E-mail tracking and spying Trojan. This Trojan infects the computer with a single file - emos.sys.
Which step would you perform to detect this type of Trojan?

Scan for suspicious startup programs using msconfig
Scan for suspicious network activities using Wireshark
Scan for suspicious device drivers in c:\windows\system32\drivers
Scan for suspicious open ports using netstat

Answer(s): C

Reveal Solution Next Question

Free CPEH-001 Exam Braindumps (page: 13)

QUESTION: 49

QUESTION: 50

QUESTION: 51

Explanation:

QUESTION: 52