Certified Ethical Hacker (CEH)888 questions across 89 pages are complete and free, with no account or card.
888 questions in this bank
Free access · progress saved on this device
During a penetration test, a tester finds that the web application being analyzed is vulnerable to Cross Site Scripting (XSS). Which of the following conditions must be met to exploit this vulnerability?
Answer: B
You perform a scan of your company's network and discover that TCP port 123 is open. What services by default run on TCP port 123?
Answer: C
Todd has been asked by the security officer to purchase a counter-based authentication system. Which of the following best describes this type of system?
Answer: C
Clark is a professional hacker. He created and configured multiple domains pointing to the same host to switch quickly between the domains and avoid detection. Identify the behavior of the adversary in the above scenario.
Answer: A
The use of alert thresholding in an IDS can reduce the volume of repeated alerts, but introduces which of the following vulnerabilities?
Answer: A
Which of the following is a low-tech way of gaining unauthorized access to systems?
Answer: A
What firewall evasion scanning technique make use of a zombie system that has low network activity as well as its fragment identification numbers?
Answer: D
What is the main advantage that a network-based IDS/IPS system has over a host-based solution?
Answer: B
By performing a penetration test, you gained access under a user account. During the test, you established a connection with your own machine via the SMB service and occasionally entered your login and password in plaintext. Which file do you have to clean to clear the password?
Answer: D
The network administrator for a company is setting up a website with e-commerce capabilities. Packet sniffing is a concern because credit card information will be sent electronically over the Internet. Customers visiting the site will need to encrypt the data with HTTPS. Which type of certificate is used to encrypt and decrypt the data?
Answer: C
Agreed, a very poorly worded question. The second part seems to hint that the answer is symmetric, but the first part clearly says certificate which is asymmetric. It's pretty much a coin toss, but whats clear is the person who wrote this question should be maimed beyond recognition.
Source: Adapted from community discussion — Acidscars
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
312-50 practice, question 251. 888 questions available.
Version 1.0.0. How we source questions