GAQM CEH-001 問題集

質問 1：
When writing shellcodes, you must avoid ____________ because these will end the string.

A. Null bytes
B. Root bytes
C. Char bytes
D. Unicode bytes
正解：A

質問 2：
ViruXine.W32 virus hides their presence by changing the underlying executable code. This Virus code mutates while keeping the original algorithm intact, the code changes itself each time it runs, but the function of the code (its semantics) will not change at all.

Here is a section of the Virus code:

What is this technique called?
A. Metamorphic Virus
B. Polymorphic Virus
C. Stealth Virus
D. Dravidic Virus
正解：B

質問 3：
Erik notices a big increase in UDP packets sent to port 1026 and 1027 occasionally. He
enters the following at the command prompt.
$ nc -l -p 1026 -u -v
In response, he sees the following message.
cell(?(c)????STOPALERT77STOP! WINDOWS REQUIRES IMMEDIATE ATTENTION.
Windows has found 47 Critical Errors.
To fix the errors please do the following:
1.Download Registry Repair from: www.reg-patch.com
2.Install Registry Repair
3.Run Registry Repair
4.Reboot your computer
FAILURE TO ACT NOW MAY LEAD TO DATA LOSS AND CORRUPTION!
What would you infer from this alert?
A. The machine is redirecting traffic to www.reg-patch.com using adware
B. It is a messenger spam. Windows creates a listener on one of the low dynamic ports
from 1026 to 1029 and the message usually promotes malware disguised as legitimate utilities
C. An attacker has compromised the machine and backdoored ports 1026 and 1027
D. It is a genuine fault of windows registry and the registry needs to be backed up
正解：B
解説: (Topexam メンバーにのみ表示されます)

質問 4：
What is "Hacktivism"?
A. Hacking for a cause
B. An association which groups activists
C. None of the above
D. Hacking ruthlessly
正解：A
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Eve is spending her day scanning the library computers. She notices that Alice is using a computer whose port 445 is active and listening. Eve uses the ENUM tool to enumerate Alice machine. From the command prompt, she types the following command.
For /f "tokens=1 %%a in (hackfile.txt) do net use * \\10.1.2.3\c$ /user:"Administrator" %%a
What is Eve trying to do?
A. Eve is trying to connect as an user with Administrator privileges
B. Eve is trying to escalate privilege of the null user to that of Administrator
C. Eve is trying to carry out a password crack for user Administrator
D. Eve is trying to enumerate all users with Administrative privileges
正解：C
解説: (Topexam メンバーにのみ表示されます)

質問 6：
Your boss Tess King is attempting to modify the parameters of a Web-based application in order to alter the SQL statements that are parsed to retrieve data from the database. What would you call such an attack?
A. SQL Piggybacking attack
B. SQL Injection attack
C. SQL Input attack
D. SQL Select attack
正解：B
解説: (Topexam メンバーにのみ表示されます)