QUESTION: 89

This tool is widely used for ARP Poisoning attack. Name the tool.

Cain and Able
Beat Infector
Poison Ivy
Webarp Infector

Answer(s): A

BankerFox is a Trojan that is designed to steal users' banking data related to certain banking entities.
When they access any website of the affected banks through the vulnerable Firefox 3.5 browser, the Trojan is activated and logs the information entered by the user. All the information entered in that website will be logged by the Trojan and transmitted to the attacker's machine using covert channel. BankerFox does not spread automatically using its own means. It needs an attacking user's intervention in order to reach the affected computer.

What is the most efficient way an attacker located in remote location to infect this banking Trojan on a victim's machine?

Physical access - the attacker can simply copy a Trojan horse to a victim's hard disk infecting the machine via Firefox add-on extensions
Custom packaging - the attacker can create a custom Trojan horse that mimics the appearance of a program that is unique to that particular computer
Custom packaging - the attacker can create a custom Trojan horse that mimics the appearance of a program that is unique to that particular computer
Custom packaging - the attacker can create a custom Trojan horse that mimics the appearance of a program that is unique to that particular computer
Downloading software from a website? An attacker can offer free software, such as shareware programs and pirated mp3 files

Answer(s): E

Reveal Solution Next Question

QUESTION: 91

In the context of password security: a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Ripper, and running it against user accounts located by the application. The larger the word and word fragment selection, the more effective the dictionary attack is. The brute force method is the most inclusive - though slow. Usually, it tries every possible letter and number combination in its automated exploration. If you would use both brute force and dictionary combined together to have variations of words, what would you call such an attack?

Full Blown Attack
Thorough Attack
Hybrid Attack
BruteDict Attack

Answer(s): C

Reveal Solution Next Question

QUESTION: 92

You receive an e-mail with the following text message. "Microsoft and HP today warned all customers that a new, highly dangerous virus has been discovered which will erase all your files at midnight. If there's a file called hidserv.exe on your computer, you have been infected and your computer is now running a hidden server that allows hackers to access your computer. Delete the file immediately. Please also pass this message to all your friends and colleagues as soon as possible." You launch your antivirus software and scan the suspicious looking file hidserv.exe located in c:\windows directory and the AV comes out clean meaning the file is not infected. You view the file signature and confirm that it is a legitimate Windows system file "Human Interface Device Service".
What category of virus is this?

Virus hoax
Spooky Virus
Stealth Virus
Polymorphic Virus

Answer(s): A

Reveal Solution Next Question

Free CPEH-001 Exam Braindumps (page: 23)

QUESTION: 89

QUESTION: 90

QUESTION: 91

QUESTION: 92