CPEH-001 시험 - GAQM실제시험문제와 답 - 736문항

Question No : 1

Sam is working as s pen-tester in an organization in Houston. He performs penetration testing on IDS in order to find the different ways an attacker uses to evade the IDS. Sam sends a large amount of packets to the target IDS that generates alerts, which enable Sam to hide the real traffic.
What type of method is Sam using to evade IDS?

A.Denial-of-Service
B.False Positive Generation
C.Insertion Attack
D.Obfuscating

정답:

Question No : 2

Bob, a system administrator at TPNQM SA, concluded one day that a DMZ is not needed if he properly configures the firewall to allow access just to servers/ports, which can have direct internet access, and block the access to workstations.
Bob also concluded that DMZ makes sense just when a stateful firewall is available, which is not the case of TPNQM SA.
In this context, what can you say?
A. Bob can be right since DMZ does not make sense when combined with stateless firewalls
B. Bob is partially right. He does not need to separate networks if he can create rules by destination IPs, one by one
C. Bob is totally wrong. DMZ is always relevant when the company has internet servers and workstations
D. Bob is partially right. DMZ does not make sense when a stateless firewall is available

정답: C

Question No : 3

A virus that attempts to install itself inside the file it is infecting is called?

A.Tunneling virus
B.Cavity virus
C.Polymorphic virus
D.Stealth virus

정답:

Question No : 4

You are looking for SQL injection vulnerability by sending a special character to web applications.
Which of the following is the most useful for quick validation?

A.Double quotation
B.Backslash
C.Semicolon
D.Single quotation

정답:

Question No : 5

Which of the following cryptography attack is an understatement for the extraction of cryptographic secrets (e.g. the password to an encrypted file) from a person by a coercion or torture?

A.Chosen-Cipher text Attack
B.Ciphertext-only Attack
C.Timing Attack
D.Rubber Hose Attack

정답:

Question No : 6

Identify the UDP port that Network Time Protocol (NTP) uses as its primary means of communication?

A.123
B.161
C.69
D.113

정답:

Question No : 7

You are a security officer of a company. You had an alert from IDS that indicates that one PC on your Intranet is connected to a blacklisted IP address (C2 Server) on the Internet. The IP address was blacklisted just before the alert. You are staring an investigation to roughly analyze the severity of the situation.
Which of the following is appropriate to analyze?

A.Event logs on the PC
B.Internet Firewall/Proxy log
C.IDS log
D.Event logs on domain controller

정답:

Question No : 8

When tuning security alerts, what is the best approach?

A.Tune to avoid False positives and False Negatives
B.Rise False positives Rise False Negatives
C.Decrease the false positives
D.Decrease False negatives

정답:

Question No : 9

Bob finished a C programming course and created a small C application to monitor the network traffic and produce alerts when any origin sends “many” IP packets, based on the average number of packets sent by all origins and using some thresholds.
In concept, the solution developed by Bob is actually:

A.Just a network monitoring tool
B.A signature-based IDS
C.A hybrid IDS
D.A behavior-based IDS

정답:

Question No : 10

Assume a business-crucial web-site of some company that is used to sell handsets to the customers worldwide. All the developed components are reviewed by the security team on a monthly basis. In order to drive business further, the web-site developers decided to add some 3rd party marketing tools on it. The tools are written in JavaScript and can track the customer’s activity on the site. These tools are located on the servers of the marketing company.
What is the main security risk associated with this scenario?

A.External script contents could be maliciously modified without the security team knowledge
B.External scripts have direct access to the company servers and can steal the data from there
C.There is no risk at all as the marketing services are trustworthy
D.External scripts increase the outbound company data traffic which leads greater financial losses

정답:

Question No : 11

On performing a risk assessment, you need to determine the potential impacts when some of the critical business process of the company interrupt its service.
What is the name of the process by which you can determine those critical business?

A.Risk Mitigation
B.Emergency Plan Response (EPR)
C.Disaster Recovery Planning (DRP)
D.Business Impact Analysis (BIA)

정답:

Question No : 12

You are the Network Admin, and you get a compliant that some of the websites are no longer accessible. You try to ping the servers and find them to be reachable. Then you type the IP address and then you try on the browser, and find it to be accessible. But they are not accessible when you try using the URL.
What may be the problem?

A.Traffic is Blocked on UDP Port 53
B.Traffic is Blocked on UDP Port 80
C.Traffic is Blocked on UDP Port 54
D.Traffic is Blocked on UDP Port 80

정답:

Question No : 13

What is the least important information when you analyze a public IP address in a security alert?

A.ARP
B.Whois
C.DNS
D.Geolocation

정답:

Question No : 14

Which of the following statements is TRUE?

A.Sniffers operate on Layer 2 of the OSI model
B.Sniffers operate on Layer 3 of the OSI model
C.Sniffers operate on both Layer 2 & Layer 3 of the OSI model.
D.Sniffers operate on the Layer 1 of the OSI model.

정답:

Question No : 15

If you want only to scan fewer ports than the default scan using Nmap tool, which option would you use?

A.-sP
B.-P
C.-r
D.-F

정답:

GAQM CPEH-001 시험