DVD PAKET TUTORIAL HACKING - + TOOLS & OS - Career Academy & Certified Ethical Hacker

[chinonk]

QUESTION 240:

While scanning a network you observe that all of the web servers in the DMZ are
responding to ACK packets on port 80.
What can you infer from this observation?
A. They are using Windows based web servers.
B. They are using UNIX based web servers.
C. They are not using an intrusion detection system.
D. They are not using a stateful inspection firewall.

Answer: D

 

[chinonk]

QUESTION 241:

You are the security administrator for a large network. You want to prevent
attackers from running any sort of traceroute into your DMZ and discover the
internal structure of publicly accessible areas of the network.
How can you achieve this?
A. Block ICMP at the firewall.
B. Block UDP at the firewall.
C. Both A and B.
D. There is no way to completely block doing a trace route into this area.

Answer: D

 

[chinonk]

QUESTION 242:

Bob, and Administrator at Certkiller was furious when he discovered that his buddy
Trent, has launched a session hijack attack against his network, and sniffed on his
communication, including administrative tasks suck as configuring routers,
firewalls, IDS, via Telnet.
Bob, being an unhappy administrator, seeks your help to assist him in ensuring that
attackers such as Trent will not be able to launch a session hijack in Certkiller .
Based on the above scenario, please choose which would be your corrective
measurement actions (Choose two)
A. Use encrypted protocols, like those found in the OpenSSH suite.
B. Implement FAT32 filesystem for faster indexing and improved performance.
C. Configure the appropriate spoof rules on gateways (internal and external).
D. Monitor for CRP caches, by using IDS products.

Answer: A, C

 

[chinonk]

QUESTION 243:

Network Intrusion Detection systems can monitor traffic in real time on networks.
Which one of the following techniques can be very effective at avoiding proper
detection?
A. Fragmentation of packets.
B. Use of only TCP based protocols.
C. Use of only UDP based protocols.
D. Use of fragmented ICMP traffic only.

Answer: A

 

[chinonk]

QUESTION 244:

What do you conclude from the nmap results below?
Staring nmap V. 3.10ALPHA0 (www.insecure.org/map/)
(The 1592 ports scanned but not shown below are in state:
closed)
Port State Service
21/tcp open ftp
25/tcp open smtp
80/tcp open http
443/tcp open https
Remote operating system guess: Too many signatures match
the reliability guess the OS. Nmap run completed - 1 IP
address (1 host up) scanned in 91.66 seconds
A. The system is a Windows Domain Controller.
B. The system is not firewalled.
C. The system is not running Linux or Solaris.
D. The system is not properly patched.

Answer: B

 

[chinonk]

QUESTION 248:

When referring to the Domain Name Service, what is denoted by a 'zone'?
A. It is the first domain that belongs to a company.
B. It is a collection of resource records.
C. It is the first resource record type in the SOA.
D. It is a collection of domains.

Answer: B

 

[chinonk]

QUESTION 294:

Which of the following is NOT a valid NetWare access level?
A. Not Logged in
B. Logged in
C. Console Access
D. Administrator

Answer: D