312-50 : CEH Certified Ethical Hacker (312-50v9) : Part 29

312-50 : CEH Certified Ethical Hacker (312-50v9) : Part 29

1. Peter, a Network Administrator, has come to you looking for advice on a tool that would help him perform SNMP enquires over the network.

   Which of these tools would do the SNMP enumeration he is looking for? Select the best answers.

   • SNMPUtil
   • SNScan
   • SNMPScan
   • Solarwinds IP Network Browser
   • NMap

2. If a token and 4-digit personal identification number (PIN) are used to access a computer system and the token performs off-line checking for the correct PIN, what type of attack is possible?

   • Birthday
   • Brute force
   • Man-in-the-middle
   • Smurf

3. Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm throughout the company he is evaluating. Bob is familiar with password weaknesses and key loggers.

   Which of the following options best represents the means that Bob can adopt to retrieve passwords from his clients hosts and servers?

   • Hardware, Software, and Sniffing.
   • Hardware and Software Keyloggers.
   • Passwords are always best obtained using Hardware key loggers.
   • Software only, they are the most effective.

4. Study the snort rule given below:

   

   From the options below, choose the exploit against which this rule applies.

   • WebDav
   • SQL Slammer
   • MS Blaster
   • MyDoom

5. Which of the following algorithms can be used to guarantee the integrity of messages being sent, in transit, or stored?

   • symmetric algorithms
   • asymmetric algorithms
   • hashing algorithms
   • integrity algorithms

6. A user on your Windows 2000 network has discovered that he can use L0phtcrack to sniff the SMB exchanges which carry user logons. The user is plugged into a hub with 23 other systems.

   However, he is unable to capture any logons though he knows that other users are logging in.

   What do you think is the most likely reason behind this?

   • There is a NIDS present on that segment.
   • Kerberos is preventing it.
   • Windows logons cannot be sniffed.
   • L0phtcrack only sniffs logons to web servers.

7. You are attempting to crack LM Manager hashed from Windows 2000 SAM file. You will be using LM Brute force hacking tool for decryption. What encryption algorithm will you be decrypting?

   • MD4
   • DES
   • SHA
   • SSL

8. In the context of password security, a simple dictionary attack involves loading a dictionary file (a text file full of dictionary words) into a cracking application such as L0phtCrack or John the Ripper, and running it against user accounts located by the application. The larger the word and word fragment selection, the more effective the dictionary attack is. The brute force method is the most inclusive, although slow. It usually tries every possible letter and number combination in its automated exploration. If you would use both brute force and dictionary methods combined together to have variation of words, what would you call such an attack?

   • Full Blown
   • Thorough
   • Hybrid
   • BruteDics

9. What is the algorithm used by LM for Windows2000 SAM?

   • MD4
   • DES
   • SHA
   • SSL

10. E-mail scams and mail fraud are regulated by which of the following?

    • 18 U.S.C. par. 1030 Fraud and Related activity in connection with Computers
    • 18 U.S.C. par. 1029 Fraud and Related activity in connection with Access Devices
    • 18 U.S.C. par. 1362 Communication Lines, Stations, or Systems
    • 18 U.S.C. par. 2510 Wire and Electronic Communications Interception and Interception of Oral Communication

11. Which of the following LM hashes represent a password of less than 8 characters? (Choose two.)

    • BA810DBA98995F1817306D272A9441BB
    • 44EFCE164AB921CQAAD3B435B51404EE
    • 0182BD0BD4444BF836077A718CCDF409
    • CEC52EB9C8E3455DC2265B23734E0DAC
    • B757BF5C0D87772FAAD3B435B51404EE
    • E52CAC67419A9A224A3B108F3FA6CB6D

12. Which of the following is the primary objective of a rootkit?

    • It opens a port to provide an unauthorized service
    • It creates a buffer overflow
    • It replaces legitimate programs
    • It provides an undocumented opening in a program

13. This kind of password cracking method uses word lists in combination with numbers and special characters:

    • Hybrid
    • Linear
    • Symmetric
    • Brute Force

14. _________ is a tool that can hide processes from the process list, can hide files, registry entries, and intercept keystrokes.

    • Trojan
    • RootKit
    • DoS tool
    • Scanner
    • Backdoor

15. What is the BEST alternative if you discover that a rootkit has been installed on one of your computers?

    • Copy the system files from a known good system
    • Perform a trap and trace
    • Delete the files and try to determine the source
    • Reload from a previous backup
    • Reload from known good media

16. What do Trinoo, TFN2k, WinTrinoo, T-Sight, and Stracheldraht have in common?

    • All are hacking tools developed by the legion of doom
    • All are tools that can be used not only by hackers, but also security personnel
    • All are DDOS tools
    • All are tools that are only effective against Windows
    • All are tools that are only effective against Linux

17. How can you determine if an LM hash you extracted contains a password that is less than 8 characters long?

    • There is no way to tell because a hash cannot be reversed
    • The right most portion of the hash is always the same
    • The hash always starts with AB923D
    • The left most portion of the hash is always the same
    • A portion of the hash will be all 0’s

18. When discussing passwords, what is considered a brute force attack?

    • You attempt every single possibility until you exhaust all possible combinations or discover the password
    • You threaten to use the rubber hose on someone unless they reveal their password
    • You load a dictionary of words into your cracking program
    • You create hashes of a large number of words and compare it with the encrypted passwords
    • You wait until the password expires

19. Which of the following are well known password-cracking programs?

    • L0phtcrack
    • NetCat
    • Jack the Ripper
    • Netbus
    • John the Ripper

20. Password cracking programs reverse the hashing process to recover passwords. (True/False.)

    • True
    • False