QUESTION: 169

ViruXine.W32 virus hides their presence by changing the underlying executable code. This Virus code mutates while keeping the original algorithm intact, the code changes itself each time it runs, but the function of the code (its semantics) will not change at all.

Here is a section of the Virus code:

What is this technique called?

Polymorphic Virus
Metamorphic Virus
Dravidic Virus
Stealth Virus

Answer(s): A

Reveal Solution Next Question

QUESTION: 170

"Testing the network using the same methodologies and tools employed by attackers" Identify the correct terminology that defines the above statement.

Vulnerability Scanning
Penetration Testing
Security Policy Implementation
Designing Network Security

Answer(s): B

Reveal Solution Next Question

QUESTION: 171

Nathan is testing some of his network devices. Nathan is using Macof to try and flood the ARP cache of these switches. If these switches' ARP cache is successfully flooded, what will be the result?

The switches will drop into hub mode if the ARP cache is successfully flooded.
If the ARP cache is flooded, the switches will drop into pix mode making it less susceptible to attacks.
Depending on the switch manufacturer, the device will either delete every entry in its ARP cache or reroute packets to the nearest switch.
The switches will route all traffic to the broadcast address created collisions.

Answer(s): A

Reveal Solution Next Question

QUESTION: 172

You are programming a buffer overflow exploit and you want to create a NOP sled of 200 bytes in the program exploit.c

What is the hexadecimal value of NOP instruction?

0x60
0x80
0x70
0x90

Answer(s): D

Reveal Solution Next Question

Free CPEH-001 Exam Braindumps (page: 43)

QUESTION: 169

QUESTION: 170

QUESTION: 171

QUESTION: 172