Question 1

Which tool/utility can help you extract the application layer data from each TCP connection from a log file into separate files?

Options :

A : Snort

B : argus

C : TCPflow

D : Tcpdump

Answer: C

Question 2

Which of the following statement correctly defines ICMP Flood Attack? (Select 2 answers) 222

Options :

A : Bogus ECHO reply packets are flooded on the network spoofing the IP and MAC address

B : The ICMP packets signal the victim system to reply and the combination of traffic saturates the bandwidth of the victim-s network

C : ECHO packets are flooded on the network saturating the bandwidth of the subnet causing denial of service

D : A DDoS ICMP flood attack occurs when the zombies send large volumes of ICMP_ECHO_REPLY packets to the victim system.

Answer: B,D

Question 3

While probing an organization you discover that they have a wireless network. From your attempts to connect to the WLAN you determine that they have deployed MAC filtering by using ACL on the access points. What would be the easiest way to circumvent and communicate on the WLAN?

Options :

A : Attempt to crack the WEP key using Airsnort.

B : Attempt to brute force the access point and update or delete the MAC ACL.

C : Steel a client computer and use it to access the wireless network.

D : Sniff traffic if the WLAN and spoof your MAC address to one that you captured.

Answer: D

Question 4

This method is used to determine the Operating system and version running on a remote target system. What is it called?

Options :

A : Service Degradation

B : OS Fingerprinting

C : Manual Target System

D : Identification Scanning

Answer: B

Question 5

You work as security technician at XYZ.com. While doing web application testing, you might be required to look through multiple web pages online which can take a long time. Which of the processes listed below would be a more efficient way of doing this type of validation?

Free CPEH-001 Mock Exam – Practice Online Confidently

Buying Options: