GAQM CPEH-001 問題集

質問 1：
A tester has been using the msadc.pl attack script to execute arbitrary commands on a Windows NT4 web server. While it is effective, the tester finds it tedious to perform extended functions. On further research, the tester come across a perl script that runs the following msadc functions:system("perl msadc.pl -h $host -C \"echo open $your >testfile\"");

Which exploit is indicated by this script?
A. A denial of service exploit
B. A buffer overflow exploit
C. A SQL injection exploit
D. A chained exploit
正解：D

質問 2：
In Trojan terminology, what is required to create the executable file chess.exe as shown below?

A. Mixer
B. Wrapper
C. Converter
D. Zipper
正解：B

質問 3：
What is a sniffing performed on a switched network called?
A. Passive sniffing
B. Direct sniffing
C. Active sniffing
D. Spoofed sniffing
正解：C

質問 4：
A denial of Service (DoS) attack works on the following principle:
A. Overloaded buffer systems can easily address error conditions and respond appropriately.
B. All CLIENT systems have TCP/IP stack implementation weakness that can be compromised and permit them to lunch an attack easily.
C. A server stops accepting connections from certain networks one those network become flooded.
D. Host systems cannot respond to real traffic, if they have an overwhelming number of incomplete connections (SYN/RCVD State).
E. MS-DOS and PC-DOS operating system utilize a weaknesses that can be compromised and permit them to launch an attack easily.
正解：D
解説: (Topexam メンバーにのみ表示されます)

質問 5：
Attackers target HINFO record types stored on a DNS server to enumerate information. These are information records and potential source for reconnaissance. A network administrator has the option of entering host information specifically the CPU type and operating system when creating a new DNS record. An attacker can extract this type of information easily from a DNS server. Which of the following commands extracts the HINFO record?
A. Option

B. Option

C. Option

D. Option

正解：C

質問 6：
This TCP flag instructs the sending system to transmit all buffered data immediately.
A. PSH
B. RST
C. URG
D. SYN
E. FIN
正解：A

質問 7：
June, a security analyst, understands that a polymorphic virus has the ability to mutate and can change its known viral signature and hide from signature-based antivirus programs. Can June use an antivirus program in this case and would it be effective against a polymorphic virus?
A. No. June can't use an antivirus program since it compares the signatures of executable files to the database of known viral signatures and in the case the polymorphic viruses cannot be detected by a signature-based anti-virus program
B. Yes. June can use an antivirus program since it compares the parity bit of executable files to the database of known check sum counts and it is effective on a polymorphic virus
C. Yes. June can use an antivirus program since it compares the signatures of executable files to the database of known viral signatures and it is very effective against a polymorphic virus
D. No. June can't use an antivirus program since it compares the size of executable files to the database of known viral signatures and it is effective on a polymorphic virus
正解：A

質問 8：
Which of the following is a characteristic of Public Key Infrastructure (PKI)?
A. Public-key cryptosystems do not provide technical non-repudiation via digital signatures.
B. Public-key cryptosystems do not require a secure key distribution channel.
C. Public-key cryptosystems distribute public-keys within digital signatures.
D. Public-key cryptosystems are faster than symmetric-key cryptosystems.
正解：C

質問 9：
Which of the following open source tools would be the best choice to scan a network for potential targets?
A. NIKTO
B. NMAP
C. CAIN
D. John the Ripper
正解：B