CEH-001 Online Practice Questions and Answers

Web servers often contain directories that do not need to be indexed. You create a text file with search engine indexing restrictions and place it on the root directory of the Web Server.

User-agent: *

Disallow: /images/

Disallow: /banners/

Disallow: /Forms/

Disallow: /Dictionary/

Disallow: /_borders/

Disallow: /_fpclass/

Disallow: /_overlay/

Disallow: /_private/

Disallow: /_themes/

What is the name of this file?

A. robots.txt

B. search.txt

C. blocklist.txt

D. spf.txt

When utilizing technical assessment methods to assess the security posture of a network, which of the following techniques would be most effective in determining whether end-user security training would be beneficial?

A. Vulnerability scanning

B. Social engineering

C. Application security testing

D. Network sniffing

Which initial procedure should an ethical hacker perform after being brought into an organization?

A. Begin security testing.

B. Turn over deliverables.

C. Sign a formal contract with non-disclosure.

D. Assess what the organization is trying to protect.

What are the three types of compliance that the Open Source Security Testing Methodology Manual (OSSTMM) recognizes?

A. Legal, performance, audit

B. Audit, standards based, regulatory

C. Contractual, regulatory, industry

D. Legislative, contractual, standards based

Your lab partner is trying to find out more information about a competitors web site. The site has a .com extension. She has decided to use some online whois tools and look in one of the regional Internet registrys. Which one would you suggest she looks in first?

A. LACNIC

B. ARIN

C. APNIC

D. RIPE

E. AfriNIC

Which of the following is an automated vulnerability assessment tool?

A. Whack a Mole

B. Nmap

C. Nessus

D. Kismet

E. Jill32

While reviewing the result of scanning run against a target network you come across the following:

Which among the following can be used to get this output?

A. A Bo2k system query.

B. nmap protocol scan

C. A sniffer

D. An SNMP walk

Which of the following command line switch would you use for OS detection in Nmap?

A. -D

B. -O

C. -P

D. -X

Why would an attacker want to perform a scan on port 137?

A. To discover proxy servers on a network

B. To disrupt the NetBIOS SMB service on the target host

C. To check for file and print sharing on Windows systems

D. To discover information about a target host using NBTSTAT

Which of the following is NOT true of cryptography?

A. Science of protecting information by encoding it into an unreadable format

B. Method of storing and transmitting data in a form that only those it is intended for can read and process

C. Most (if not all) algorithms can be broken by both technical and non-technical means

D. An effective way of protecting sensitive information in storage but not in transit