Free Preparation Discussions
MENU
GAQM CPEH-001 Exam Questions
- Topic 1: Predicting the Future of Hacking/ Information Gathering Techniques
- Topic 2: Target Enumeration and Port Scanning Techniques/ Hacking Web Applications
- Topic 3: Windows Exploit Development Basics/ Introduction to Hacking
- Topic 4: Social Engineering Hacking/ Wireless Networks/ Linux Basics
- Topic 5: Hackers Methodology/ Network Sniffing/ Vulnerability Assessment
- Topic 6: Client-Side Exploitation/ Remote Exploitation/ Password Hacking
- Topic 7: Hack Attack/ Post exploitation/ Wireless Hacking/ Web Hacking
Free GAQM CPEH-001 Exam Actual Questions
Note: Premium Questions for CPEH-001 were last updated On Dec. 14, 2024 (see below)
Vulnerability mapping occurs after which phase of a penetration test?
The order should be Passive information gathering, Network level discovery, Host scanning and Analysis of host scanning.
To scan a host downstream from a security gateway, Firewalking:
Firewalking uses a traceroute-like IP packet analysis to determine whether or not a particular packet can pass from the attacker's host to a destination host through a packet-filtering device. This technique can be used to map 'open' or 'pass through' ports on a gateway. More over, it can determine whether packets with various control information can pass through a given gateway.
StackGuard (as used by Immunix), ssp/ProPolice (as used by OpenBSD), and Microsoft's /GS option use _____ defense against buffer overflow attacks.
Canaries or canary words are known values that are placed between a buffer and control data on the stack to monitor buffer overflows. When the buffer overflows, it will clobber the canary, making the overflow evident. This is a reference to the historic practice of using canaries in coal mines, since they would be affected by toxic gases earlier than the miners, thus providing a biological warning system.
During the intelligence gathering phase of a penetration test, you come across a press release by a security products vendor stating that they have signed a multi-million dollar agreement with the company you are targeting. The contract was for vulnerability assessment tools and network based IDS systems. While researching on that particular brand of IDS you notice that its default installation allows it to perform sniffing and attack analysis on one NIC and caters to its management and reporting on another NIC. The sniffing interface is completely unbound from the TCP/IP stack by default. Assuming the defaults were used, how can you detect these sniffing interfaces?
When a Nic is set to Promiscuous mode it just blindly takes whatever comes through to it network interface and sends it to the Application layer. This is why they are so hard to detect. Actually you could use ARP requests and Send them to every pc and the one which responds to all the requests can be identified as a NIC on Promiscuous mode and there are some very special programs that can do this for you. But considering the alternatives in the question the right answer has to be that the interface cannot be detected.
Most NIDS systems operate in layer 2 of the OSI model. These systems feed raw traffic into a detection engine and rely on the pattern matching and/or statistical analysis to determine what is malicious. Packets are not processed by the host's TCP/IP stack allowing the NIDS to analyze traffic the host would otherwise discard. Which of the following tools allows an attacker to intentionally craft packets to confuse pattern-matching NIDS systems, while still being correctly assembled by the host TCP/IP stack to render the attack payload?
fragroute intercepts, modifies, and rewrites egress traffic destined for a specified host, implementing most of the attacks described in the Secure Networks 'Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection' paper of January 1998. It features a simple ruleset language to delay, duplicate, drop, fragment, overlap, print, reorder, segment, source-route, or otherwise monkey with all outbound packets destined for a target host, with minimal support for randomized or probabilistic behaviour. This tool was written in good faith to aid in the testing of network intrusion detection systems, firewalls, and basic TCP/IP stack behaviour.
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Cordelia
22 hours agoLashawna
6 days agoDaniel
14 days agoDana
16 days agoBrynn
1 months agoAzalee
1 months agoCarin
1 months agoMing
2 months agoLuisa
2 months agoFernanda
2 months agoRaina
2 months agoMarshall
2 months agoPaola
3 months agoGracia
3 months agoAmmie
3 months agoHelga
3 months agoMabel
4 months agoDulce
5 months agoSantos
6 months agoDeeanna
6 months ago