CEH Exam A2 Q&A

1. C. Replay attacks involve capturing passwords, most likely encrypted, and playing them back to fake authentication. For more information, see Chapter 4. - Answer- 1. In which type of attack are passwords never cracked? A. Cryptography attacks B. Brute-force attacks C. Replay attacks D. John the Ripper attacks 2. A. An LM hash splits a password into two sections. If the password is 7 characters or less, then the blank portion of the password will always be a hex value of AAD3B435B51404EE. 0x preceding the value indicates it is in Hex. For more information, see Chapter 4. - Answer- 2. If the password is 7 characters or less, then the second half of the LM hash is always: A. 0xAAD3B435B51404EE B. 0xAAD3B435B51404AA C. 0xAAD3B435B51404BB D. 0xAAD3B435B51404CC 3. A,B,C,D. A dictionary word can always be broken using brute force. For more information, see Chapter 4. - Answer- 3. What defensive measures will you take to protect your network from password brute-force attacks? (Choose all that apply.) A. Never leave a default password. B. Never use a password that can be found in a dictionary. C. Never use a password related to the hostname, domain name, or anything else that can be found with Whois. D. Never use a password related to your hobbies, pets, relatives, or date of birth. E. Use a word that has more than 21 characters from a dictionary as the password. 4. D. The CANSPAM Act is an acronym for Controlling the Assault of Non-Solicited Pornography and Marketing Act; the act attempts to prevent unsolicited spam. For more information, see Chapter 1. - Answer- 4. Which of the following is the act intended to prevent spam emails? A. 1990 Computer Misuse Act B. Spam Prevention Act C. US-Spam 1030 Act D. CANSPAM Act 5. A. Network-Based Application Recognition is a Cisco IOS mechanism for controlling traffic through network ingress points. For more information, see Chapter 6. - Answer- 5. is a Cisco IOS mechanism that examines packets on Layers 4 to 7. A. Network-Based Application Recognition (NBAR) B. Denial-of-Service Filter (DOSF) C. Rule Filter Application Protocol (RFAP) D.