CEH Practice Exam With Complete Solutions
Latest Update
IP spoofing is a method by which an attacker changes his or her IP address so that he or
she appears to be someone else.
Which of the following IP spoofing detection techniques succeeds only when the
attacker is in a different subnet? - ANSWER Direct TTL probes technique*
IP identification number technique
TCP flow control method
UDP flow control method
Which of the following scans work only if the operating system's TCP/IP implementation
is based on RFC 793? - ANSWER TCP connect scan
OS fingerprinting refers to a technique or method used to identify the operating system
running on a remote target system. It's an important scanning technique since the
probability of success certainly goes up if the attacker knows the OS. One type of OS
fingerprinting is active stack fingerprinting.
Which of the following is true about active stack fingerprinting? - ANSWER Is based on
the fact that various vendors of OS implement the TCP stack differently
Enumeration is defined as the process of extracting user names, machine names,
network resources, shares, and services from a system.
Which of the following enumeration an attacker uses to obtain list of computers that
belongs to a domain? - ANSWER Netbios enumeration
, Steganography is basically the technique for hiding a secret message within a usual
message and extracting it at the destination for maintaining data confidentiality.
Which of the following steganography technique embed secret message in the
frequency domain of a signal? - ANSWER Transform domain techniques
A virus is a self-replicative program that generates its own code by attaching copies of it
into other executable codes.
Which of the following virus evade anti-virus software by intercepting its requests to the
operating system? - ANSWER Stealth/Tunneling virus
Lawful intercept is a process that allows a Law Enforcement Agency -LEA- to conduct
electronic surveillance of target as authorized by judicial or administrative order.
Which of the following statement is true for lawful intercept? - ANSWER Hides
information about lawful intercepts from all but the most privileged users
Denial of Service (DoS) is an attack to a computer or network that disables or
discourages legitimate use of its resources. In a DoS attack, attackers flood a victim
system with non-legitimate service requests or traffic in order to overload its resources,
which prevents it from performing intended tasks.
Which of the following is a symptom of a DoS attack? - ANSWER Unable to access any
particular website
Firewalls are categorized into two; namely hardware firewall and software firewall.
Identify the correct statement for a software firewall. - ANSWER Software firewall is
placed between the normal application and the networking components of the operating
system
RSA is a public-key cryptosystem developed by the MIT professors Ronald L. Rivest, Adi
Shamir, and Leonard M. Adleman in 1977 in an attempt to help ensure Internet security.
Latest Update
IP spoofing is a method by which an attacker changes his or her IP address so that he or
she appears to be someone else.
Which of the following IP spoofing detection techniques succeeds only when the
attacker is in a different subnet? - ANSWER Direct TTL probes technique*
IP identification number technique
TCP flow control method
UDP flow control method
Which of the following scans work only if the operating system's TCP/IP implementation
is based on RFC 793? - ANSWER TCP connect scan
OS fingerprinting refers to a technique or method used to identify the operating system
running on a remote target system. It's an important scanning technique since the
probability of success certainly goes up if the attacker knows the OS. One type of OS
fingerprinting is active stack fingerprinting.
Which of the following is true about active stack fingerprinting? - ANSWER Is based on
the fact that various vendors of OS implement the TCP stack differently
Enumeration is defined as the process of extracting user names, machine names,
network resources, shares, and services from a system.
Which of the following enumeration an attacker uses to obtain list of computers that
belongs to a domain? - ANSWER Netbios enumeration
, Steganography is basically the technique for hiding a secret message within a usual
message and extracting it at the destination for maintaining data confidentiality.
Which of the following steganography technique embed secret message in the
frequency domain of a signal? - ANSWER Transform domain techniques
A virus is a self-replicative program that generates its own code by attaching copies of it
into other executable codes.
Which of the following virus evade anti-virus software by intercepting its requests to the
operating system? - ANSWER Stealth/Tunneling virus
Lawful intercept is a process that allows a Law Enforcement Agency -LEA- to conduct
electronic surveillance of target as authorized by judicial or administrative order.
Which of the following statement is true for lawful intercept? - ANSWER Hides
information about lawful intercepts from all but the most privileged users
Denial of Service (DoS) is an attack to a computer or network that disables or
discourages legitimate use of its resources. In a DoS attack, attackers flood a victim
system with non-legitimate service requests or traffic in order to overload its resources,
which prevents it from performing intended tasks.
Which of the following is a symptom of a DoS attack? - ANSWER Unable to access any
particular website
Firewalls are categorized into two; namely hardware firewall and software firewall.
Identify the correct statement for a software firewall. - ANSWER Software firewall is
placed between the normal application and the networking components of the operating
system
RSA is a public-key cryptosystem developed by the MIT professors Ronald L. Rivest, Adi
Shamir, and Leonard M. Adleman in 1977 in an attempt to help ensure Internet security.
