CEH-001 Exam Dumps - GAQM Certified Ethical Hacker CEH Questions and Answers

The request to the web server is not visible to the administrator of the vulnerable application.

The attack is called “Blind” because, although the application properly filters user input, it is still vulnerable to code injection.

The successful attack does not show an error message to the administrator of the affected application.

The vulnerable application does not display errors with information about the injection results to the attacker.

To create a denial of service attack.

To verify information about the mail administrator and his address.

To gather information about internal hosts used in email treatment.

To gather information about procedures that are in place to deal with such messages.

LACNIC

ARIN

APNIC

RIPE

AfriNIC

John

Rebecca

Sheela

Shawn

Somia

Chang

Micah

Perform a vulnerability scan of the system.

Determine the impact of enabling the audit feature.

Perform a cost/benefit analysis of the audit feature.

Allocate funds for staffing of audit log review.

Threat identification, vulnerability identification, control analysis

Threat identification, response identification, mitigation identification

Attack profile, defense profile, loss profile

System profile, vulnerability identification, security determination

Machine A

#yes AAAAAAAAAAAAAAAAAAAAAA | nc –v –v –l –p 2222 > /dev/null

Machine B

#yes BBBBBBBBBBBBBBBBBBBBBB | nc machinea 2222 > /dev/null

Machine A

cat somefile | nc –v –v –l –p 2222

Machine B

cat somefile | nc othermachine 2222

Machine A

nc –l –p 1234 | uncompress –c | tar xvfp

Machine B

tar cfp - /some/dir | compress –c | nc –w 3 machinea 1234

Machine A

while true : do

nc –v –l –s –p 6000 machineb 2

Machine B

while true ; do

nc –v –l –s –p 6000 machinea 2

done

command injection.

SQL injection.

directory traversal.

LDAP injection.

ICMP ECHO_REQUEST & TCP SYN

ICMP ECHO_REQUEST & TCP ACK

ICMP ECHO_REPLY & TFP RST

ICMP ECHO_REPLY & TCP FIN

David can block port 125 at the firewall.

David can block all EHLO requests that originate from inside the office.

David can stop POP3 traffic by blocking all HELO requests that originate from inside the office.

David can block port 110 to block all POP3 traffic.