CEH v11 Set 1 Questions with Correct Answers
Which of the following is the best countermeasure to encrypting ransomwares?
A. Use multiple antivirus softwares
B. Pay a ransom
C. Keep some generation of off-line backup
D. Analyze the ransomware to get decryption key of encrypted data - Answer-C....
CEH v11 Set 1 Questions with
Correct Answers
Which of the following is the best countermeasure to encrypting ransomwares?
A. Use multiple antivirus softwares
B. Pay a ransom
C. Keep some generation of off-line backup
D. Analyze the ransomware to get decryption key of encrypted data - Answer-C. Keep
some generation of off-line backup
Session splicing is an IDS evasion technique in which an attacker delivers data in
multiple, small sized packets to the target computer, making it very difficult for an IDS to
detect the attack signatures. Which tool can be used to perform session splicing
attacks?
A. tcpsplice
B. Burp
C. Hydra
D. Whisker - Answer-D. Whisker
You have successfully comprised a server having an IP address of 10.10.0.5. You
would like to enumerate all machines in the same network quickly.What is the best
Nmap command you will use?
A. nmap -T4 -q 10.10.0.0/24
B. nmap -T4 -F 10.10.0.0/24
C. nmap -T4 -r 10.10.1.0/24
D. nmap -T4 -O 10.10.0.0/24 - Answer-B. nmap -T4 -F 10.10.0.0/24
As a Certified Ethical Hacker, you were contracted by a private firm to conduct an
external security assessment through penetration testing.What document describes the
specifics of the testing, the associated violations, and essentially protects both the
organization's interest and your liabilities as a tester?
A. Service Level Agreement
B. Project Scope
C. Rules of Engagement
D. Non-Disclosure Agreement - Answer-C. Rules of Engagement
Which of the following is the BEST way to defend against network sniffing?
A. Using encryption protocols to secure network communications
B. Register all machines MAC Address in a Centralized Database
C. Use Static IP Address
, D. Restrict Physical Access to Server Rooms hosting Critical Servers - Answer-A. Using
encryption protocols to secure network communications
Which of the following is the least-likely physical characteristic to be used in biometric
control that supports a large company?
A. Iris patterns
B. Voice
C. Height and Weight
D. Fingerprints - Answer-C. Height and Weight
Although FTP traffic is not encrypted by default, which layer 3 protocol would allow for
end-to-end encryption of the connection?
A. SFTP
B. Ipsec
C. SSL
D. FTPS - Answer-B. Ipsec
While performing online banking using a Web browser, a user receives an email that
contains a link to an interesting Web site. When the user clicks on the link, another Web
browser session starts and displays a video of cats playing a piano. The next business
day, the user receives what looks like an email from his bank, indicating that his bank
account has been accessed from a foreign country. The email asks the user to call his
bank and verify the authorization of a funds transfer that took place. What Web browser-
based security vulnerability was exploited to compromise the user?
A. Clickjacking
B. Cross-Site Scripting
C. Cross-Site Request Forgery
D. Web form input validation - Answer-C. Cross-Site Request Forgery
Which service in a PKI will vouch for the identity of an individual or company?
A. KDC
B. CR
C. CBC
D. CA - Answer-D. CA
Identify the web application attack where the attackers exploit vulnerabilities in
dynamically generated web pages to inject client-side script into web pages viewed by
other users.
A. LDAP Injection attack
B. Cross-Site Scripting (XSS)
C. SQL injection attack
D. Cross-Site Request Forgery (CSRF) - Answer-B. Cross-Site Scripting (XSS)
User A is writing a sensitive email message to user B outside the local network. User A
has chosen to use PKI to secure his message and ensure only user B can read the
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Scholarsstudyguide. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $13.49. You're not tied to anything after your purchase.
