Question 1

Which of the following lists are valid data-gathering activities associated with a risk assessment?

Options :

A : Threat identification, vulnerability identification, control analysis

B : Threat identification, response identification, mitigation identification

C : Attack profile, defense profile, loss profile

D : System profile, vulnerability identification, security determination

Answer: A

Question 2

Which of the following items is unique to the N-tier architecture method of designing software applications?

Options :

A : Application layers can be separated, allowing each layer to be upgraded independently from other layers.

B : It is compatible with various databases including Access, Oracle, and SQL.

C : Data security is tied into each layer and must be updated for all layers when any upgrade is performed.

D : Application layers can be written in C, ASP.NET, or Delphi without any performance loss.

Answer: A

Question 3

A hacker searches in Google for filetype:pcf to find Cisco VPN config files. Those files may contain connectivity passwords that can be decoded with which of the following?

Options :

A : Cupp

B : Nessus

C : Cainand Abel

D : John The Ripper Pro

Answer: C

Question 4

Bob waits near a secured door, holding a box. He waits until an employee walks up to the secured door and uses the special card in order to access the restricted area of the target company. Just as the employee opens the door, Bob walks up to the employee (still holding the box) and asks the employee to hold the door open so that he can enter. What is the best way to undermine the social engineering activity of tailgating?

Options :

A : Issue special cards to access secure doors at the company and provide a one-time only brief description of use of the special card

B : Educate and enforce physical security policies of the company to all the employees on a regular basis

C : Setup a mock video camera next to the special card reader adjacent to the secure door

D : Post a sign that states, 'no tailgating' next to the special card reader adjacent to the secure door

Answer: B

Question 5

What are two types of ICMP code used when using the ping command?

Options :

A : It uses types 0 and 8.

B : It uses types 13 and 14.

C : It uses types 15 and 17.

D : The ping command does not use ICMP but uses UDP.

Answer: A

Confidently Practice Online with Free CPEH-001 Exam Cram

Buying Options: