Certified Ethical Hacker (CEH)888 questions across 89 pages are complete and free, with no account or card.
888 questions in this bank
Free access · progress saved on this device
A DDoS attack is performed at layer 7 to take down web infrastructure. Partial HTTP requests are sent to the web infrastructure or applications. Upon receiving a partial request, the target servers opens multiple connections and keeps waiting for the requests to complete. Which attack is being described here?
Answer: B
A hacker is attempting to see which ports have been left open on a network. Which NMAP switch would the hacker use?
Answer: C
NMAP switch "-sS" (Option C), which stands for "TCP SYN scan". This is one of the most popular and widely used NMAP scan techniques that sends SYN packets to each target port, and waits for a response from the target. This can help the hacker identify which ports are open and accepting connections. Option A (-sO) is an IP protocol scan that can be used to identify which IP protocols are supported by the target system. Option B (-sP) is a "ping" or "host discovery" scan that can be used to identify which hosts are up and responding to network traffic. Option D (-sU) is a UDP scan that can be used to identify which UDP ports are open and accepting connections.
Source: Adapted from community discussion — lau2123
Chandler works as a pen-tester in an IT-firm in New York. As a part of detecting viruses in the systems, he uses a detection method where the anti-virus executes the malicious codes on a virtual machine to simulate CPU and memory activities. Which type of virus detection method did Chandler use in this context?
Answer: B
You have gained physical access to a Windows 2008 R2 server, which has an accessible disc drive. When you attempt to boot the server and log in, you are unable to guess the password. In your toolkit, you have an Ubuntu 9.10 Linux LiveCD. Which Linux-based tool can change any user's password or activate disabled Windows accounts?
Answer: C
Andrew is an Ethical Hacker who was assigned the task of discovering all the active devices hidden by a restrictive firewall in the IPv4 range in a given target network. Which of the following host discovery techniques must he use to perform the given task?
Answer: B
A hacker is attempting to use nslookup to query Domain Name Service (DNS). The hacker uses the nslookup interactive mode for the search. Which command should the hacker type into the command shell to request the appropriate records?
Answer: C
nslookup set type= Specifies a DNS resource record type. The default resource record type is A, but you can use any of the following values: A: Specifies a computer's IP address. ANY: Specifies a computer's IP address. CNAME: Specifies a canonical name for an alias. GID Specifies a group identifier of a group name. HINFO: Specifies a computer's CPU and type of operating system. MB: Specifies a mailbox domain name. MG: Specifies a mail group member. MINFO: Specifies mailbox or mail list information. MR: Specifies the mail rename domain name. MX: Specifies the mail exchanger. NS: Specifies a DNS name server for the named zone. PTR: Specifies a computer name if the query is an IP address; otherwise, specifies the pointer to other information. SOA: Specifies the start-of-authority for a DNS zone. TXT: Specifies the text information. UID: Specifies the user identifier. UINFO: Specifies the user information. WKS: Describes a well-known service. https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/nslookup-set-type
Source: Adapted from community discussion — dorinh
An attacker scans a host with the below command. Which three flags are set? (Choose three.) #nmap ""sX host.domain.com
Answer: C
What does a firewall check to prevent particular ports and applications from getting packets into an organization?
Answer: A
Abel, a cloud architect, uses container technology to deploy applications/software including all its dependencies, such as libraries and configuration files, binaries, and other resources that run independently from other processes in the cloud environment. For the containerization of applications, he follows the five-tier container technology architecture. Currently, Abel is verifying and validating image contents, signing images, and sending them to the registries. Which of the following tiers of the container technology architecture is Abel currently working in?
Answer: B
A hacker searches in Google for filetype:pcf to find Cisco VPN config files. Those files may contain connectivity passwords that can be decoded with which of the following?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
312-50 practice, question 301. 888 questions available.
Version 1.0.0. How we source questions