GAQM CPEH-001 Quiz 1 Topic 7 Questions 1-5

Question: 1

To what does ''message repudiation'' refer to what concept in the realm of email security?

AMessage repudiation means a user can validate which mail server or servers a message was passed through.

BMessage repudiation means a user can claim damages for a mail message that damaged their reputation.

CMessage repudiation means a recipient can be sure that a message was sent from a particular person.

DMessage repudiation means a recipient can be sure that a message was sent from a certain host.

EMessage repudiation means a sender can claim they did not actually send a particular message.

Show Answer

Question: 2

Eve is spending her day scanning the library computers. She notices that Alice is using a computer whose port 445 is active and listening. Eve uses the ENUM tool to enumerate Alice machine. From the command prompt, she types the following command.

For /f "tokens=1 %%a in (hackfile.txt) do net use * \\10.1.2.3\c$ /user:"Administrator" %%a

What is Eve trying to do?

AEve is trying to connect as an user with Administrator privileges

BEve is trying to enumerate all users with Administrative privileges

CEve is trying to carry out a password crack for user Administrator

DEve is trying to escalate privilege of the null user to that of Administrator

Show Answer

Question: 3

What file system vulnerability does the following command take advantage of?

type c:\anyfile.exe > c:\winnt\system32\calc.exe:anyfile.exe

AHFS

BADS

CNTFS

DBackdoor access

Show Answer

Question: 4

Exhibit:

ettercap --NCLzs --quiet

What does the command in the exhibit do in ''Ettercap''?

AThis command will provide you the entire list of hosts in the LAN

BThis command will check if someone is poisoning you and will report its IP.

CThis command will detach from console and log all the collected passwords from the network to a file.

DThis command broadcasts ping to scan the LAN instead of ARP request of all the subnet IPs.

Show Answer

Question: 5

Exhibit:

q5_CPEH-001

You are conducting pen-test against a company's website using SQL Injection techniques. You enter ''anuthing or 1=1-'' in the username filed of an authentication form. This is the output returned from the server. What is the next step you should do?

AIdentify the user context of the web application by running_
http://www.example.com/order/include_rsa_asp?pressReleaseID=5
AND
USER_NAME() = 'dbo'

BIdentify the database and table name by running:
http://www.example.com/order/include_rsa.asp?pressReleaseID=5
AND
ascii(lower(substring((SELECT TOP 1 name FROM sysobjects WHERE
xtype='U'), 1))) > 109

CFormat the C: drive and delete the database by running:
http://www.example.com/order/include_rsa.asp?pressReleaseID=5 AND
xp_cmdshell 'format c: /q /yes '; drop database myDB; --

DReboot the web server by running:
http://www.example.com/order/include_rsa.asp?pressReleaseID=5
AND xp_cmdshell 'iisreset --reboot'; --

Show Answer

GAQM CPEH-001 Quiz:1 Topic:7 Questions:1-5