Certified Ethical Hacker 2

During the process of encryption and decryption, what keys are shared?

• Private keys

• User passwords

• Public keys

• Public and private keys

A security engineer has been asked to deploy a secure remote access solution that will allow employees to connect to the company's internal network. Which of the following can be implemented to minimize the opportunity for the man-in-the-middle attack to occur?

• SSL

• Mutual authentication

• IPSec

• Static IP addresses

On a Linux device, which of the following commands will start the Nessus client in the background so that the Nessus server can be configured?

• nessus +

• nessus *s

• nessus &

• nessus -d

Which of the following is a hashing algorithm?

• MD5

• PGP

• DES

• ROT13

What type of vulnerability/attack is it when the malicious person forces the user's browser to

send an authenticated request to a server?

• Cross-site request forgery

• Cross-site scripting

• Session hijacking

• Server side request forgery

Which of the following command line switch would you use for OS detection in Nmap?

• -D

• -O

• -P

• -X

Supposed you are the Chief Network Engineer of a certain Telco. Your company is planning for a big business expansion and it requires that your network authenticate users connecting using analog modems, Digital Subscriber Lines (DSL), wireless data services, and Virtual Private Networks (VPN) over a Frame Relay network. Which AAA protocol would you implement?

• TACACS+

• DIAMETER

• Kerberos

• RADIUS

Using Windows CMD, how would an attacker list all the shares to which the current user context has access?

• NET USE

• NET CONFIG

• NET FILE

• NET VIEW

A common cryptographical tool is the use of XOR. XOR the following binary values: 10110001 00111010

• 10001011

• 11011000

• 10011101

• 10111100

Which of the following commands runs snort in packet logger mode?

• ./snort -dev -h ./log

• ./snort -dev -l ./log

• ./snort -dev -o ./log

• ./snort -dev -p ./log