Free CPEH-001 Exam Braindumps
Certified Professional Ethical Hacker (CPEH) Exam Questions 216–220 (page: 45)

Updated On: 9-Feb-2026

Hayden is the network security administrator for her company, a large finance firm based in Miami. Hayden just returned from a security conference in Las Vegas where they talked about all kinds of old and new security threats; many of which she did not know of. Hayden is worried about the current security state of her company's network so she decides to start scanning the network from an external IP address. To see how some of the hosts on her network react, she sends out SYN packets to an IP range. A number of IPs responds with a SYN/ACK response. Before the connection is established she sends RST packets to those hosts to stop the session. She does this to see how her intrusion detection system will log the traffic.
What type of scan is Hayden attempting here?

  1. Hayden is attempting to find live hosts on her company's network by using an XMAS scan
  2. She is utilizing a SYN scan to find live hosts that are listening on her network
  3. The type of scan, she is using is called a NULL scan
  4. Hayden is using a half-open scan to find live hosts on her network

Answer(s): D



Web servers are often the most targeted and attacked hosts on organizations' networks. Attackers may exploit software bugs in the Web server, underlying operating system, or active content to gain unauthorized access.



Identify the correct statement related to the above Web Server installation?

  1. Lack of proper security policy, procedures and maintenance
  2. Bugs in server software, OS and web applications
  3. Installing the server with default settings
  4. Unpatched security flaws in the server software, OS and applications

Answer(s): C



If an attacker's computer sends an IPID of 24333 to a zombie (Idle Scanning) computer on a closed port, what will be the response?

  1. The zombie computer will respond with an IPID of 24334.
  2. The zombie computer will respond with an IPID of 24333.
  3. The zombie computer will not send a response.
  4. The zombie computer will respond with an IPID of 24335.

Answer(s): A



Jacob is looking through a traffic log that was captured using Wireshark. Jacob has come across what appears to be SYN requests to an internal computer from a spoofed IP address.
What is Jacob seeing here?

  1. Jacob is seeing a Smurf attack.
  2. Jacob is seeing a SYN flood.
  3. He is seeing a SYN/ACK attack.
  4. He has found evidence of an ACK flood.

Answer(s): B



Which of the following Registry location does a Trojan add entries to make it persistent on Windows

7? (Select 2 answers)

  1. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
  2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\System32\CurrentVersion\ Run
  3. HKEY_CURRENT_USER\Software\Microsoft\Windows\System32\CurrentVersion\Run
  4. HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

Answer(s): A,D



Viewing page 45 of 177
Viewing questions 221 - 225 out of 878 questions


Post your Comments and Discuss GAQM CPEH-001 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!