QUESTION: 229

You are the security administrator for a large network. You want to prevent attackers from running any sort of traceroute into your DMZ and discovering the internal structure of publicly accessible areas of the network. How can you achieve this?

There is no way to completely block tracerouting into this area
Block UDP at the firewall
Block TCP at the firewall
Block ICMP at the firewall

Answer(s): A

Reveal Solution Next Question

QUESTION: 230

Neil is an IT security consultant working on contract for Davidson Avionics. Neil has been hired to audit the network of Davidson Avionics. He has been given permission to perform any tests necessary. Neil has created a fake company ID badge and uniform. Neil waits by one of the company's entrance doors and follows an employee into the office after they use their valid access card to gain entrance.
What type of social engineering attack has Neil employed here?

Neil has used a tailgating social engineering attack to gain access to the offices
He has used a piggybacking technique to gain unauthorized access
This type of social engineering attack is called man trapping
Neil is using the technique of reverse social engineering to gain access to the offices of Davidson Avionics

Answer(s): A

Reveal Solution Next Question

QUESTION: 231

After a client sends a connection request (SYN) packet to the server, the server will respond (SYN- ACK) with a sequence number of its choosing, which then must be acknowledged (ACK) by the client. This sequence number is predictable; the attack connects to a service first with its own IP address, records the sequence number chosen, and then opens a second connection from a forged IP address. The attack doesn't see the SYN-ACK (or any other packet) from the server, but can guess the correct responses. If the source IP address is used for authentication, then the attacker can use the one- sided communication to break into the server.
What attacks can you successfully launch against a server using the above technique?

Denial of Service attacks
Session Hijacking attacks
Web page defacement attacks
IP spoofing attacks

Answer(s): B

Reveal Solution Next Question

QUESTION: 232

Which of the following represent weak password? (Select 2 answers)

Passwords that contain letters, special characters, and numbers ExamplE. ap1$%##f@52
Passwords that contain only numbers ExamplE. 23698217
Passwords that contain only special characters ExamplE. &*#@!(%)
Passwords that contain letters and numbers ExamplE. meerdfget123
Passwords that contain only letters Exampl QWERTYKLRTY
Passwords that contain only special characters and numbers ExamplE. 123@$45
Passwords that contain only letters and special characters ExamplE. bob@&ba
Passwords that contain Uppercase/Lowercase from a dictionary list ExamplE. OrAnGe

Answer(s): E,H

Reveal Solution Next Question

Free CPEH-001 Exam Braindumps (page: 58)

QUESTION: 229

QUESTION: 230

QUESTION: 231

QUESTION: 232