Question 1

What is the disadvantage of an automated vulnerability assessment tool?

Options :

A : Ineffective

B : Slow

C : Prone to false positives

D : Prone to false negatives

E : Noisy

Answer: A

Question 2

You work as security technician at XYZ.com. While doing web application testing, you might be required to look through multiple web pages online which can take a long time. Which of the processes listed below would be a more efficient way of doing this type of validation?

Options :

A : Use mget to download all pages locally for further inspection.

B : Use wget to download all pages locally for further inspection.

C : Use get* to download all pages locally for further inspection.

D : Use get() to download all pages locally for further inspection.

Answer: B

Question 3

This method is used to determine the Operating system and version running on a remote target system. What is it called?

Options :

A : Service Degradation

B : OS Fingerprinting

C : Manual Target System

D : Identification Scanning

Answer: B

Question 4

Which of the following is aclient-server tool utilized to evade firewall inspection?

Options :

A : tcp-over-dns

B : kismet

C : nikto

D : hping

Answer: A

Question 5

Why do you need to capture five to ten million packets in order to crack WEP with AirSnort?

Options :

A : All IVs are vulnerable to attack

B : Air Snort uses a cache of packets

C : Air Snort implements the FMS attack and only encrypted packets are counted

D : A majority of weak IVs transmitted by access points and wireless cards are not filtered by contemporary wireless manufacturers

Answer: C

Higher Test Marks with Free Online CPEH-001 Exam Practice

Buying Options: