CEH EXAM Q&A 2023

Which of the following countermeasure can specifically protect against both the MAC Flood and MAC Spoofing at-tacks? A. Configure Port Security on the switch B. Configure Port Recon on the switch C. Configure Switch Mapping D. Configure Mul ple Recogni on on the switch - Answer- A 2 Jimmy, an a acker, knows that he can take advantage of poorly designed input valida on rou nes to create or alter SQL commands to gain access to private data or execute commands in the database. What technique does Jimmy use to compromise a database? A. Jimmy can submit user input that executes an opera ng system command to compromise a target system B. Jimmy can gain control of system to flood the target system with requests,preven ng legi mate users from gaining access C. Jimmy can u lize an incorrect configura on that leads to access with higher-than expected privilege of the database D. Jimmy can u lize this par cular database threat that is an SQL injec on technique to penetrate a target system - Answer- D 3 This IDS defea ng technique works by spli ng a datagram (or packet) into mul ple fragments and the IDS will not spot the true nature of the fully assembled datagram. The datagram is not reassembled un l it reaches its final des na on. It would be a processor-intensive task for IDS to reassemble all fragments itself, and on a busy system the packet will slip through the IDS onto the network. What is this technique called? A. IP Rou ng or Packet Dropping B. IDS Spoofing or Session Assembly C.