QUESTION: 241

A majority of attacks come from insiders, people who have direct access to a company's computer system as part of their job function or a business relationship.
Who is considered an insider?

A competitor to the company because they can directly benefit from the publicity generated by making such an attack
Disgruntled employee, customers, suppliers, vendors, business partners, contractors, temps, and consultants
The CEO of the company because he has access to all of the computer systems
A government agency since they know the company's computer system strengths and weaknesses

Answer(s): B

Reveal Solution Next Question

Jeremy is web security consultant for Information Securitas. Jeremy has just been hired to perform contract work for a large state agency in Michigan. Jeremy's first task is to scan all the company's external websites. Jeremy comes upon a login page which appears to allow employees access to sensitive areas on the website. James types in the following statement in the username field:
SELECT * from Users where username='admin' ?AND password='' AND email like '%@testers.com%' What will the SQL statement accomplish?

If the page is susceptible to SQL injection, it will look in the Users table for usernames of admin
This statement will look for users with the name of admin, blank passwords, and email addresses that end in @testers.com
This Select SQL statement will log James in if there are any users with NULL passwords
James will be able to see if there are any default user accounts in the SQL database

Answer(s): B

Explanation:

This query will search for admin user with blank password with mail address @testers.com

Reveal Solution Next Question

QUESTION: 243

An attacker is attempting to telnet into a corporation's system in the DMZ. The attacker doesn't want to get caught and is spoofing his IP address. After numerous tries he remains unsuccessful in connecting to the system. The attacker rechecks that the target system is actually listening on Port 23 and he verifies it with both nmap and hping2. He is still unable to connect to the target system.
What could be the reason?

The firewall is blocking port 23 to that system
He needs to use an automated tool to telnet in
He cannot spoof his IP and successfully use TCP
He is attacking an operating system that does not reply to telnet even when open

Answer(s): C

Reveal Solution Next Question

QUESTION: 244

If an attacker's computer sends an IPID of 31400 to a zombie (Idle Scanning) computer on an open port, what will be the response?

31400
31402
The zombie will not send a response
31401

Answer(s): B

Explanation:

31402 is the correct answer.

Reveal Solution Next Question

Free CPEH-001 Exam Braindumps (page: 61)

QUESTION: 241

QUESTION: 242

Explanation:

QUESTION: 243

QUESTION: 244

Explanation: