Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  2. Home
  3. Exams
  4. GAQM
  5. CPEH-001

GAQM CPEH-001 Exam
Certified Professional Ethical Hacker (CPEH) Exam (Page 6 )

Updated On: 1-Feb-2026
Page 6 of 177
PDF with 878 Questions

One of your team members has asked you to analyze the following SOA record.
What is the version? Rutgers.edu.SOA NS1.Rutgers.edu ipad.college.edu (200302028 3600 3600 604800 2400.

  1. 200303028
  2. 3600
  3. 604800
  4. 2400
  5. 60
  6. 4800

Answer(s): A

Explanation:

The SOA starts with the format of YYYYMMDDVV where VV is the version.



MX record priority increases as the number increases. (True/False.

  1. True
  2. False

Answer(s): B

Explanation:

The highest priority MX record has the lowest number.



Which of the following tools can be used to perform a zone transfer?

  1. NSLookup
  2. Finger
  3. Dig
  4. Sam Spade
  5. Host
  6. Netcat
  7. Neotrace

Answer(s): A,C,D,E

Explanation:

There are a number of tools that can be used to perform a zone transfer. Some of these include:
NSLookup, Host, Dig, and Sam Spade.



Under what conditions does a secondary name server request a zone transfer from a primary name server?

  1. When a primary SOA is higher that a secondary SOA
  2. When a secondary SOA is higher that a primary SOA
  3. When a primary name server has had its service restarted
  4. When a secondary name server has had its service restarted
  5. When the TTL falls to zero

Answer(s): A

Explanation:

Understanding DNS is critical to meeting the requirements of the CEH. When the serial number that is within the SOA record of the primary server is higher than the Serial number within the SOA record of the secondary DNS server, a zone transfer will take place.



You are manually conducting Idle Scanning using Hping2. During your scanning you notice that almost every query increments the IPID regardless of the port being queried. One or two of the queries cause the IPID to increment by more than one value.
Why do you think this occurs?

  1. The zombie you are using is not truly idle.
  2. A stateful inspection firewall is resetting your queries.
  3. Hping2 cannot be used for idle scanning.
  4. These ports are actually open on the target system.

Answer(s): A

Explanation:

If the IPID is incremented by more than the normal increment for this type of system it means that the system is interacting with some other system beside yours and has sent packets to an unknown host between the packets destined for you.



Viewing page 6 of 177
Viewing questions 26 - 30 out of 878 questions



Post your Comments and Discuss GAQM CPEH-001 exam prep with other Community members:

Join the CPEH-001 Discussion