CEH Pre Assessment

Which of the following techniques are NOT relevant in preventing arp spoof attack?

• Arpwatch
• Static MAC Entries
• Secure ARP Protocol
• Kernel based patches

What term describes the amount of risk that remains after the vulnerabilities are classified, and the countermeasures have been deployed?

• Inherent risk
• Impact risk
• Residual risk
• Deferred risk

Darius and Mathew were performing internal vulnerability scan within the corporate network and reported the results to his manager.Manager found that it was not performed correctly because there were some mismatches on comparing both of them. He was expecting the same results, as both the scans were performed at the same time, using the same tools and the same IP ranges. The results simply showed more findings in Darius' scan compared to Mathew's scan.What was the most probably root cause?

• Administrator of the scanned system updated most of the vulnerabilities
• One of the scan was blocked by IPS
• One of the scan was blocked by IDS
• Mathew's scan was blocked by Firewall

During an Xmas scan, what indicates a port is closed?

• RST
• SYN
• ACK
• No return response

What is the purpose of DNS AAAA record?

• Authorization, Authentication and Auditing record
• Address prefix record
• IPv6 address resolution record
• Address database record

An attacker is trying to redirect the traffic of a small office. That office is using their own mail server, DNS server and NTP server because of the importance of their jobs. The attacker gains access to the DNS server and redirects the direction www.google.com to his own IP address. Now, when the employees of the office want to go to Google, they are being redirected to the attacker's machine. What is the name of this kind of attack?

• DNS Spoofing
• ARP Poisoning
• Smurf Attack
• MAC Flooding

Max saw a guy (Mario) who looked like a janitor who was holding a lot of boxes. Max held the door open for Mario. Mario was able to access the company without identification. What kind of attack is this?

• Tailgating
• Session Hijacking
• None of them
• Phishing

What type of analysis is performed when an attacker has partial knowledge of the inner-workings of the application?

• Announced
• White-box
• Black-box
• Grey-box

An enterprise recently moved to a new office, and the new neighborhood is a little risky. The CEO wants to monitor the physical perimeter and the entrance doors 24 hours. What is the best option to do this job?

• Use an IDS in the entrance doors and install some of them near the corners
• Install a CCTV with cameras pointing to the entrance doors and the street
• Use lights in all the entrance doors and along the company's perimeter
• Use fences in the entrance doors

Which method of password cracking takes the most time and effort?

• Dictionary attack
• Brute force
• Rainbow tables
• Shoulder surfing