GAQM CEH-001 問題集

質問 1：
What statement is true regarding LM hashes?
A. LM hashes are based on AES128 cryptographic standard.
B. LM hashes are not generated when the password length exceeds 15 characters.
C. Uppercase characters in the password are converted to lowercase.
D. LM hashes consist in 48 hexadecimal characters.
正解：B

質問 2：
Which type of password cracking technique works like dictionary attack but adds some numbers and symbols to the words from the dictionary and tries to crack the password?
A. Dictionary attack
B. Hybrid attack
C. Syllable attack
D. Brute forcing attack
E. Rule-based attack
正解：B

質問 3：
A majority of attacks come from insiders, people who have direct access to a company's computer system as part of their job function or a business relationship. Who is considered an insider?
A. A competitor to the company because they can directly benefit from the publicity generated by making such an attack
B. Disgruntled employee, customers, suppliers, vendors, business partners, contractors, temps, and consultants
C. A government agency since they know the company's computer system strengths and weaknesses
D. The CEO of the company because he has access to all of the computer systems
正解：B

質問 4：
The following script shows a simple SQL injection. The script builds an SQL query by concatenating hard-coded strings together with a string entered by the user:

The user is prompted to enter the name of a city on a Web form. If she enters Chicago, the query assembled by the script looks similar to the following:
SELECT * FROM OrdersTable WHERE ShipCity = 'Chicago'
How will you delete the OrdersTable from the database using SQL Injection?
A. EXEC; SELECT * OrdersTable > DROP -
B. Chicago'; drop table OrdersTable -
C. Delete table'blah'; OrdersTable -
D. cmdshell'; 'del c:\sql\mydb\OrdersTable' //
正解：B

質問 5：
The following is part of a log file taken from the machine on the network with the IP address of 192.168.1.106:
Time:Mar 13 17:30:15 Port:20 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
Time:Mar 13 17:30:17 Port:21 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
Time:Mar 13 17:30:19 Port:22 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
Time:Mar 13 17:30:21 Port:23 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
Time:Mar 13 17:30:22 Port:25 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
Time:Mar 13 17:30:23 Port:80 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
Time:Mar 13 17:30:30 Port:443 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP
What type of activity has been logged?
A. Port scan targeting 192.168.1.103
B. Denial of service attack targeting 192.168.1.103
C. Port scan targeting 192.168.1.106
D. Teardrop attack targeting 192.168.1.106
正解：C

質問 6：
What is the disadvantage of an automated vulnerability assessment tool?
A. Prone to false positives
B. Ineffective
C. Noisy
D. Prone to false negatives
E. Slow
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 7：
TCP SYN Flood attack uses the three-way handshake mechanism.
1.An attacker at system A sends a SYN packet to victim at system B.
2.System B sends a SYN/ACK packet to victim A.
3.As a normal three-way handshake mechanism system A should send an ACK packet to system B, however, system A does not send an ACK packet to system B.
In this case client B is waiting for an ACK packet from client A.
This status of client B is called _________________
A. "half open"
B. "full-open"
C. "xmas-open"
D. "half-closed"
正解：A