Question 1

Which of the following describes a component of Public Key Infrastructure (PKI) where a copy of a private key is stored to provide third-party access and to facilitate recovery operations?

Options :

A : Key registry

B : Recovery agent

C : Directory

D : Key escrow

Answer: D

Question 2

A tester has been using the msadc.pl attack script to execute arbitrary commands on a Windows NT4 web server. While it is effective, the tester finds it tedious to perform extended functions. On further research, the tester come across a perl script that runs the following msadc functions:system('perl msadc.pl -h $host -C \'echo open $your >testfile\'');

Other-Image-2b59c889b-c75b-4ac0-b591-85f86c0ab8a6

Which exploit is indicated by this script?

Options :

A : A buffer overflow exploit

B : A chained exploit

C : A SQL injection exploit

D : A denial of service exploit

Answer: B

Question 3

The following is part of a log file taken from the machine on the network with the IP address of 192.168.1.106:

Time:Mar 13 17:30:15 Port:20 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP

Time:Mar 13 17:30:17 Port:21 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP

Time:Mar 13 17:30:19 Port:22 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP

Time:Mar 13 17:30:21 Port:23 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP

Time:Mar 13 17:30:22 Port:25 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP

Time:Mar 13 17:30:23 Port:80 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP

Time:Mar 13 17:30:30 Port:443 Source:192.168.1.103 Destination:192.168.1.106 Protocol:TCP

What type of activity has been logged?

Options :

A : Port scan targeting 192.168.1.103

B : Teardrop attack targeting 192.168.1.106

C : Denial of service attack targeting 192.168.1.103

D : Port scan targeting 192.168.1.106

Answer: D

Question 4

Bob was frustrated with his competitor, Brownies Inc., and decided to launch an attack that would result in serious financial losses. He planned the attack carefully and carried out the attack at the appropriate moment. Meanwhile, Trent, an administrator at Brownies Inc., realized that their main financial transaction server had been attacked. As a result of the attack, the server crashed and Trent needed to reboot the system, as no one was able to access the resources of the company. This process involves human interaction to fix it. What kind of Denial of Service attack was best illustrated in the scenario above?

Options :

A : Simple DDoS attack

B : DoS attacks which involves flooding a network or system

C : DoS attacks which involves crashing a network or system

D : DoS attacks which is done accidentally or deliberately

Answer: C

Question 5

Whatis the most secure way to mitigate the theft of corporate information from a laptopthat was left in a hotel room?

Options :

A : Set a BIOS password.

B : Encrypt the data on the hard drive.

C : Use a strong logon password to the operating system.

D : Back up everything on the laptop and store the backup in a safe place.

Answer: B

Higher Test Marks with Free Online CPEH-001 Exam Practice

Buying Options: