Free Certified Professional Ethical Hacker (CPEH) Practice Questions

A.  

-sO

B.  

-sP

C.  

-sS

D.  

-sU

A.  

Reject all invalid email received via SMTP.

B.  

Allow full DNS zone transfers.

C.  

Remove A records for internal hosts.

D.  

Enable null session pipes.

A.  

Usernames

B.  

File permissions

C.  

Firewall rulesets

D.  

Passwords

A.  

USB token and PIN

B.  

Fingerprint scanner and retina scanner

C.  

Password and PIN

D.  

Account and password

A.  

Injecting parameters into a connection string using semicolons as a separator

B.  

Inserting malicious Javascript code into input parameters

C.  

Setting a user's session identifier (SID) to an explicit known value

D.  

Adding multiple parameters with the same name in HTTP requests

A.  

Reports

B.  

Testing tools

C.  

Metrics

D.  

Taxonomy of vulnerabilities

A.  

Password salting

B.  

Use of non-dictionary words

C.  

All uppercase character passwords

D.  

Lockout accounts under brute force password cracking attempts

A.  

filter packets at the network level.

B.  

filter specific commands, such as http:post.

C.  

retain state information for each packet.

D.  

monitor tcp handshaking.

A.  

It sends a request packet to all the network elements, asking for the MAC address from a specific IP.

B.  

It sends a reply packet to all the network elements, asking for the MAC address from a specific IP.

C.  

It sends a reply packet for a specific IP, asking for the MAC address.

D.  

It sends a request packet to all the network elements, asking for the domain name from a specific IP.

A.  

Moves the MBR to another location on the hard disk and copies itself to the original location of the MBR

B.  

Moves the MBR to another location on the RAM and copies itself to the original location of the MBR

C.  

Modifies directory table entries so that directory entries point to the virus code instead of the actual program

D.  

Overwrites the original MBR and only executes the new virus code