CPEH-001 Exam Dumps - Certified Professional Ethical Hacker (CPEH)

Go to page:

<< First
Prev
5
6
7
8
9
10
11
12
13
14
Next
Last >>

Question # 97

Which of the following is an adaptive SQL Injection testing technique used to discover coding errors by inputting massive amounts of random data and observing the changes in the output?

Function Testing

Dynamic Testing

Static Testing

Fuzzing Testing

Full Access

Question # 98

What is the main security service a cryptographic hash provides?

Integrity and ease of computation

Message authentication and collision resistance

Integrity and collision resistance

Integrity and computational in-feasibility

Full Access

Question # 99

Based on the below log, which of the following sentences are true?

Mar 1, 2016, 7:33:28 AM 10.240.250.23 â€“ 54373 10.249.253.15 â€“ 22 tcp_ip

SSH communications are encrypted itâ€™s impossible to know who is the client or the server

Application is FTP and 10.240.250.23 is the client and 10.249.253.15 is the server

Application is SSH and 10.240.250.23 is the client and 10.249.253.15 is the server

Application is SSH and 10.240.250.23 is the server and 10.249.253.15 is the server

Full Access

Question # 100

DHCP snooping is a great solution to prevent rogue DHCP servers on your network. Which security feature on switches leverages the DHCP snooping database to help prevent man-in-the-middle attacks?

Port security

A Layer 2 Attack Prevention Protocol (LAPP)

Dynamic ARP inspection (DAI)

Spanning tree

Full Access

Question # 101

You are the Network Admin, and you get a compliant that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try on the browser, and find it to be accessible. But they are not accessible when you try using the URL.

What may be the problem?

Traffic is Blocked on UDP Port 53

Traffic is Blocked on UDP Port 80

Traffic is Blocked on UDP Port 54

Traffic is Blocked on UDP Port 80

Full Access

Question # 102

Code injection is a form of attack in which a malicious user:

Inserts text into a data field that gets interpreted as code

Gets the server to execute arbitrary code using a buffer overflow

Inserts additional code into the JavaScript running in the browser

Gains access to the codebase on the server and inserts new code

Full Access

Question # 103

Which of the following statements is TRUE?

Sniffers operate on Layer 2 of the OSI model

Sniffers operate on Layer 3 of the OSI model

Sniffers operate on both Layer 2 & Layer 3 of the OSI model.

Sniffers operate on the Layer 1 of the OSI model.

Full Access

Question # 104

You need to deploy a new web-based software package for your organization. The package requires three separate servers and needs to be available on the Internet. What is the recommended architecture in terms of server placement?

All three servers need to be placed internally

A web server facing the Internet, an application server on the internal network, a database server on the internal network

A web server and the database server facing the Internet, an application server on the internal network

All three servers need to face the Internet so that they can communicate between themselves

Full Access

Go to page: