QUESTION: 165

This is an example of whois record.

Sometimes a company shares a little too much information on their organization through public domain records. Based on the above whois record, what can an attacker do? (Select 2 answers)

Search engines like Google, Bing will expose information listed on the WHOIS record
An attacker can attempt phishing and social engineering on targeted individuals using the information from WHOIS record
Spammers can send unsolicited e-mails to addresses listed in the WHOIS record
IRS Agents will use this information to track individuals using the WHOIS record information

Answer(s): B,C

Reveal Solution Next Question

QUESTION: 166

Neil is closely monitoring his firewall rules and logs on a regular basis. Some of the users have complained to Neil that there are a few employees who are visiting offensive web site during work hours, without any consideration for others. Neil knows that he has an up-to-date content filtering system and such access should not be authorized.
What type of technique might be used by these offenders to access the Internet without restriction?

They are using UDP that is always authorized at the firewall
They are using HTTP tunneling software that allows them to communicate with protocols in a way it was not intended
They have been able to compromise the firewall, modify the rules, and give themselves proper access
They are using an older version of Internet Explorer that allow them to bypass the proxy server

Answer(s): B

Reveal Solution Next Question

QUESTION: 167

In this attack, a victim receives an e-mail claiming from PayPal stating that their account has been disabled and confirmation is required before activation. The attackers then scam to collect not one but two credit card numbers, ATM PIN number and other personal details.

Ignorant users usually fall prey to this scam.
Which of the following statement is incorrect related to this attack?

Do not reply to email messages or popup ads asking for personal or financial information
Do not trust telephone numbers in e-mails or popup ads
Review credit card and bank account statements regularly
Antivirus, anti-spyware, and firewall software can very easily detect these type of attacks
Do not send credit card numbers, and personal or financial information via e-mail

Answer(s): D

Reveal Solution Next Question

QUESTION: 168

Bob is going to perform an active session hijack against Brownies Inc. He has found a target that allows session oriented connections (Telnet) and performs the sequence prediction on the target operating system. He manages to find an active session due to the high level of traffic on the network.
What is Bob supposed to do next?

Take over the session
Reverse sequence prediction
Guess the sequence numbers
Take one of the parties offline

Answer(s): C

Reveal Solution Next Question

Free CPEH-001 Exam Braindumps (page: 42)

QUESTION: 165

QUESTION: 166

QUESTION: 167

QUESTION: 168