CEH v11 Set 1 Questions with
Correct Answers
Which of the following is the best countermeasure to encrypting ransomwares?
A. Use multiple antivirus softwares
B. Pay a ransom
C. Keep some generation of off-line backup
D. Analyze the ransomware to get decryption key of encrypted data - Answer-C. Keep
some generation of off-line backup
Session splicing is an IDS evasion technique in which an attacker delivers data in
multiple, small sized packets to the target computer, making it very difficult for an IDS to
detect the attack signatures. Which tool can be used to perform session splicing
attacks?
A. tcpsplice
B. Burp
C. Hydra
D. Whisker - Answer-D. Whisker
You have successfully comprised a server having an IP address of 10.10.0.5. You
would like to enumerate all machines in the same network quickly.What is the best
Nmap command you will use?
A. nmap -T4 -q 10.10.0.0/24
B. nmap -T4 -F 10.10.0.0/24
C. nmap -T4 -r 10.10.1.0/24
D. nmap -T4 -O 10.10.0.0/24 - Answer-B. nmap -T4 -F 10.10.0.0/24
As a Certified Ethical Hacker, you were contracted by a private firm to conduct an
external security assessment through penetration testing.What document describes the
specifics of the testing, the associated violations, and essentially protects both the
organization's interest and your liabilities as a tester?
A. Service Level Agreement
B. Project Scope
C. Rules of Engagement
D. Non-Disclosure Agreement - Answer-C. Rules of Engagement
Which of the following is the BEST way to defend against network sniffing?
A. Using encryption protocols to secure network communications
B. Register all machines MAC Address in a Centralized Database
C. Use Static IP Address
, D. Restrict Physical Access to Server Rooms hosting Critical Servers - Answer-A. Using
encryption protocols to secure network communications
Which of the following is the least-likely physical characteristic to be used in biometric
control that supports a large company?
A. Iris patterns
B. Voice
C. Height and Weight
D. Fingerprints - Answer-C. Height and Weight
Although FTP traffic is not encrypted by default, which layer 3 protocol would allow for
end-to-end encryption of the connection?
A. SFTP
B. Ipsec
C. SSL
D. FTPS - Answer-B. Ipsec
While performing online banking using a Web browser, a user receives an email that
contains a link to an interesting Web site. When the user clicks on the link, another Web
browser session starts and displays a video of cats playing a piano. The next business
day, the user receives what looks like an email from his bank, indicating that his bank
account has been accessed from a foreign country. The email asks the user to call his
bank and verify the authorization of a funds transfer that took place. What Web browser-
based security vulnerability was exploited to compromise the user?
A. Clickjacking
B. Cross-Site Scripting
C. Cross-Site Request Forgery
D. Web form input validation - Answer-C. Cross-Site Request Forgery
Which service in a PKI will vouch for the identity of an individual or company?
A. KDC
B. CR
C. CBC
D. CA - Answer-D. CA
Identify the web application attack where the attackers exploit vulnerabilities in
dynamically generated web pages to inject client-side script into web pages viewed by
other users.
A. LDAP Injection attack
B. Cross-Site Scripting (XSS)
C. SQL injection attack
D. Cross-Site Request Forgery (CSRF) - Answer-B. Cross-Site Scripting (XSS)
User A is writing a sensitive email message to user B outside the local network. User A
has chosen to use PKI to secure his message and ensure only user B can read the
Correct Answers
Which of the following is the best countermeasure to encrypting ransomwares?
A. Use multiple antivirus softwares
B. Pay a ransom
C. Keep some generation of off-line backup
D. Analyze the ransomware to get decryption key of encrypted data - Answer-C. Keep
some generation of off-line backup
Session splicing is an IDS evasion technique in which an attacker delivers data in
multiple, small sized packets to the target computer, making it very difficult for an IDS to
detect the attack signatures. Which tool can be used to perform session splicing
attacks?
A. tcpsplice
B. Burp
C. Hydra
D. Whisker - Answer-D. Whisker
You have successfully comprised a server having an IP address of 10.10.0.5. You
would like to enumerate all machines in the same network quickly.What is the best
Nmap command you will use?
A. nmap -T4 -q 10.10.0.0/24
B. nmap -T4 -F 10.10.0.0/24
C. nmap -T4 -r 10.10.1.0/24
D. nmap -T4 -O 10.10.0.0/24 - Answer-B. nmap -T4 -F 10.10.0.0/24
As a Certified Ethical Hacker, you were contracted by a private firm to conduct an
external security assessment through penetration testing.What document describes the
specifics of the testing, the associated violations, and essentially protects both the
organization's interest and your liabilities as a tester?
A. Service Level Agreement
B. Project Scope
C. Rules of Engagement
D. Non-Disclosure Agreement - Answer-C. Rules of Engagement
Which of the following is the BEST way to defend against network sniffing?
A. Using encryption protocols to secure network communications
B. Register all machines MAC Address in a Centralized Database
C. Use Static IP Address
, D. Restrict Physical Access to Server Rooms hosting Critical Servers - Answer-A. Using
encryption protocols to secure network communications
Which of the following is the least-likely physical characteristic to be used in biometric
control that supports a large company?
A. Iris patterns
B. Voice
C. Height and Weight
D. Fingerprints - Answer-C. Height and Weight
Although FTP traffic is not encrypted by default, which layer 3 protocol would allow for
end-to-end encryption of the connection?
A. SFTP
B. Ipsec
C. SSL
D. FTPS - Answer-B. Ipsec
While performing online banking using a Web browser, a user receives an email that
contains a link to an interesting Web site. When the user clicks on the link, another Web
browser session starts and displays a video of cats playing a piano. The next business
day, the user receives what looks like an email from his bank, indicating that his bank
account has been accessed from a foreign country. The email asks the user to call his
bank and verify the authorization of a funds transfer that took place. What Web browser-
based security vulnerability was exploited to compromise the user?
A. Clickjacking
B. Cross-Site Scripting
C. Cross-Site Request Forgery
D. Web form input validation - Answer-C. Cross-Site Request Forgery
Which service in a PKI will vouch for the identity of an individual or company?
A. KDC
B. CR
C. CBC
D. CA - Answer-D. CA
Identify the web application attack where the attackers exploit vulnerabilities in
dynamically generated web pages to inject client-side script into web pages viewed by
other users.
A. LDAP Injection attack
B. Cross-Site Scripting (XSS)
C. SQL injection attack
D. Cross-Site Request Forgery (CSRF) - Answer-B. Cross-Site Scripting (XSS)
User A is writing a sensitive email message to user B outside the local network. User A
has chosen to use PKI to secure his message and ensure only user B can read the
