GAQM CPEH-001 問題集

質問 1：
While checking the settings on the internet browser, a technician finds that the proxy server settings have been checked and a computer is trying to use itself as a proxy server. What specific octet within the subnet does the technician see?
A. 192.168.1.1
B. 192.168.168.168
C. 127.0.0.1
D. 10.10.10.10
正解：C

質問 2：
What information should an IT system analysis provide to the risk assessor?
A. Security architecture
B. Impact analysis
C. Threat statement
D. Management buy-in
正解：A

質問 3：
A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted. Which cryptography attack is the student attempting?
A. Brute-force attack
B. Session hijacking
C. Dictionary attack
D. Man-in-the-middle attack
正解：C

質問 4：
Firewalk has just completed the second phase (the scanning phase) and a technician receives the output shown below. What conclusions can be drawn based on these scan results? TCP port 21 - no response TCP port 22 - no response TCP port 23 - Time-to-live exceeded
A. The scan on port 23 passed through the filtering device. This indicates that port 23 was not blocked at the firewall.
B. The lack of response from ports 21 and 22 indicate that those services are not running on the destination server.
C. The firewall itself is blocking ports 21 through 23 and a service is listening on port 23 of the target host.
D. The scan on port 23 was able to make a connection to the destination host prompting the firewall to respond with a TTL error.
正解：A

質問 5：
After studying the following log entries, what is the attacker ultimately trying to achieve as inferred from the log sequence?
1. mkdir -p /etc/X11/applnk/Internet/.etc
2. mkdir -p /etc/X11/applnk/Internet/.etcpasswd
3. touch -acmr /etc/passwd /etc/X11/applnk/Internet/.etcpasswd
4. touch -acmr /etc /etc/X11/applnk/Internet/.etc
5. passwd nobody -d
6. /usr/sbin/adduser dns -d/bin -u 0 -g 0 -s/bin/bash
7. passwd dns -d
8. touch -acmr /etc/X11/applnk/Internet/.etcpasswd /etc/passwd
9. touch -acmr /etc/X11/applnk/Internet/.etc /etc
A. Extract information from a local directory
B. Download rootkits and passwords into a new directory
C. Change the files Modification Access Creation times
D. Change password of user nobody
正解：C

質問 6：
What makes web application vulnerabilities so aggravating? (Choose two)
A. A firewall will not stop them.
B. They exist only on the Linux platform.
C. They are detectable by most leading antivirus software.
D. They can be launched through an authorized port.
正解：A,D
解説: (Topexam メンバーにのみ表示されます)

質問 7：
You want to use netcat to generate huge amount of useless network data continuously for various performance testing between 2 hosts. Which of the following commands accomplish this?
A. Machine A
#yes AAAAAAAAAAAAAAAAAAAAAA | nc -v -v -l -p 2222 > /dev/null
Machine B
#yes BBBBBBBBBBBBBBBBBBBBBB | nc machinea 2222 > /dev/null
B. Machine A
while true : do
nc -v -l -s -p 6000 machineb 2
Machine B
while true ; do
nc -v -l -s -p 6000 machinea 2
done
C. Machine A
nc -l -p 1234 | uncompress -c | tar xvfp
Machine B
tar cfp - /some/dir | compress -c | nc -w 3 machinea 1234
D. Machine A
cat somefile | nc -v -v -l -p 2222
Machine B
cat somefile | nc othermachine 2222
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 8：
What is the main disadvantage of the scripting languages as opposed to compiled programming languages?
A. Scripting languages are not object-oriented.
B. Scripting languages are hard to learn.
C. Scripting languages cannot be used to create graphical user interfaces.
D. Scripting languages are slower because they require an interpreter to run the code.
正解：D

質問 9：
Which of the following is the primary objective of a rootkit?
A. It provides an undocumented opening in a program
B. It replaces legitimate programs
C. It creates a buffer overflow
D. It opens a port to provide an unauthorized service
正解：B
解説: (Topexam メンバーにのみ表示されます)