CEH Final Exam Study Guide Exam And
Actual Answers.
You are reviewing source code for any buffer overflow vulnerabilities. The following C++ source
code handles data extracted from a compressed file:
if (extractedDataLength < 65536) {//Break down data into multiple chunks}else {//Handle data
in one large chunk}
The data should be broken down into multiple chunks only when the buffer of 65,536 characters
is reached or exceeded. How should you modify the condition in the first line of the code? -
Answer Change to extractedDataLength >= 65536
You have recently discovered that an attacker used the tcp-over-dns tool on your company's
network.
What is this tool meant to accomplish in an attack? - Answer Firewall evasion
You need to exchange confidential information with a trusted partner. The partner indicates to
you that he will issue certificates. These certificates are signed by the same entity that verifies
the certificate's identity. Which term is used for the type of certificate issued by the partner? -
Answer Self-signed certificates
What item is contained in the digital certificate that enables the receiver of the certificate to
send an encrypted email to the sender? - Answer Public key
You need to create a NOP slide using the Metasploit Framework. Which module should you
use? - Answer x86/opty2
You have decided to implement both client and server PKI certificates to be used by all systems
when authenticating to the corporate web site. What type of attack can this help prevent? -
Answer Man-in-the-middle attacks
Disabling directed broadcasts on all routers is a mitigation for which attack? - Answer Smurf
attack
Which of the following is the Federal Information Processing Standard for digital signatures? -
Answer DSA
Actual Answers.
You are reviewing source code for any buffer overflow vulnerabilities. The following C++ source
code handles data extracted from a compressed file:
if (extractedDataLength < 65536) {//Break down data into multiple chunks}else {//Handle data
in one large chunk}
The data should be broken down into multiple chunks only when the buffer of 65,536 characters
is reached or exceeded. How should you modify the condition in the first line of the code? -
Answer Change to extractedDataLength >= 65536
You have recently discovered that an attacker used the tcp-over-dns tool on your company's
network.
What is this tool meant to accomplish in an attack? - Answer Firewall evasion
You need to exchange confidential information with a trusted partner. The partner indicates to
you that he will issue certificates. These certificates are signed by the same entity that verifies
the certificate's identity. Which term is used for the type of certificate issued by the partner? -
Answer Self-signed certificates
What item is contained in the digital certificate that enables the receiver of the certificate to
send an encrypted email to the sender? - Answer Public key
You need to create a NOP slide using the Metasploit Framework. Which module should you
use? - Answer x86/opty2
You have decided to implement both client and server PKI certificates to be used by all systems
when authenticating to the corporate web site. What type of attack can this help prevent? -
Answer Man-in-the-middle attacks
Disabling directed broadcasts on all routers is a mitigation for which attack? - Answer Smurf
attack
Which of the following is the Federal Information Processing Standard for digital signatures? -
Answer DSA
