Free CPEH-001 Exam braindumps download (CPEH-001 exam dumps Free)

QUESTION: 461

A tester has been using the msadc.pl attack script to execute arbitrary commands on a Windows NT4 web server.
While it is effective, the tester finds it tedious to perform extended functions. On further research, the tester come across a perl script that runs the following msadc functions:system("perl msadc.pl -h $host -C \"echo open $your >testfile\"");

Which exploit is indicated by this script?

A buffer overflow exploit
A chained exploit
A SQL injection exploit
A denial of service exploit

Answer(s): B

Show Answer Next Question

QUESTION: 462

When setting up a wireless network, an administrator enters a pre-shared key for security.
Which of the following is true?

The key entered is a symmetric key used to encrypt the wireless data.
The key entered is a hash that is used to prove the integrity of the wireless data.
The key entered is based on the Diffie-Hellman method.
The key is an RSA key used to encrypt the wireless data.

Answer(s): A

Show Answer Next Question

QUESTION: 463

Which of the following defines the role of a root Certificate Authority (CA) in a Public Key Infrastructure (PKI)?

The root CA is the recovery agent used to encrypt data when a user's certificate is lost.
The root CA stores the user's hash value for safekeeping.
The CA is the trusted root that issues certificates.
The root CA is used to encrypt email messages to prevent unintended disclosure of data.

Answer(s): C

Show Answer Next Question

QUESTION: 464

Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below.
What conclusions can be drawn based on these scan results? TCP port 21 no response TCP port 22 no response TCP port 23 Time-to-live exceeded

The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host.
The lack of response from ports 21 and 22 indicate that those services are not running on the destination server.
The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.
The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error.

Answer(s): C

Show Answer Next Question

QUESTION: 465

A security engineer has been asked to deploy a secure remote access solution that will allow employees to connect to the company's internal network.
Which of the following can be implemented to minimize the opportunity for the man-in-the-middle attack to occur?

SSL
Mutual authentication
IPSec
Static IP addresses

Answer(s): C

Show Answer Next Question

Free CPEH-001 Exam Braindumps Certified Professional Ethical Hacker (CPEH) Exam Questions 461–465 (page: 94)

QUESTION: 461

QUESTION: 462

QUESTION: 463

QUESTION: 464

QUESTION: 465

Free CPEH-001 Exam Braindumps
Certified Professional Ethical Hacker (CPEH) Exam Questions 461–465 (page: 94)