Question 1

While probing an organization you discover that they have a wireless network. From your attempts to connect to the WLAN you determine that they have deployed MAC filtering by using ACL on the access points. What would be the easiest way to circumvent and communicate on the WLAN?

Options :

A : Attempt to crack the WEP key using Airsnort.

B : Attempt to brute force the access point and update or delete the MAC ACL.

C : Steel a client computer and use it to access the wireless network.

D : Sniff traffic if the WLAN and spoof your MAC address to one that you captured.

Answer: D

Question 2

This attack uses social engineering techniques to trick users into accessing a fake Web site and divulging personal information. Attackers send a legitimate-looking e-mail asking users to update their information on the company's Web site, but the URLs in the e-mail actually point to a false Web site.

Options :

A : Wiresharp attack

B : Switch and bait attack

C : Phishing attack

D : Man-in-the-Middle attack

Answer: C

Question 3

A penetration tester was hired to perform a penetration testfor abank. The tester began searching for IP ranges owned by the bank, performing lookups on the bank's DNS servers, reading news articles online about the bank, watching what times the bank employees come into work and leave from work, searching the bank's job postings (paying special attention to IT related jobs), and visiting the local dumpster for the bank's corporate office. What phase of the penetration test is the tester currently in?

Options :

A : Information reporting

B : Vulnerability assessment

C : Active information gathering

D : Passive information gathering

Answer: D

Question 4

One of the better features of NetWare is the use of packet signature that includes cryptographic signatures. The packet signature mechanism has four levels from 0 to 3.

In the list below which of the choices represent the level that forces NetWare to sign all packets?

Options :

A : 0 (zero)

B : 1

C : 2

D : 3

Answer: D

Question 5

You have been called to investigate a sudden increase in network traffic at XYZ. It seems that the traffic generated was too heavy that normal business functions could no longer be rendered to external employees and clients. After a quick investigation, you find that the computer has services running attached to TFN2k and Trinoo software. What do you think was the most likely cause behind this sudden increase in traffic?

Options :

A : A distributed denial of service attack.

B : A network card that was jabbering.

C : A bad route on the firewall.

D : Invalid rules entry at the gateway.

Answer: A

Confidently Practice Online with Free CPEH-001 Exam Cram

Buying Options: