CPEH-001 試験問題を無料オンラインアクセス

If an attacker's computer sends an IPID of 31400 to a zombie (Idle Scanning) computer on an open port, what will be the response?

• A.31401
• B.31402
• C.The zombie will not send a response
• D.31400

Steven the hacker realizes that the network administrator of XYZ is using syskey to protect organization resources in the Windows 2000 Server. Syskey independently encrypts the hashes so that physical access to the server, tapes, or ERDs is only first step to cracking the passwords. Steven must break through the encryption used by syskey before he can attempt to brute force dictionary attacks on the hashes. Steven runs a program called "SysCracker" targeting the Windows 2000 Server machine in attempting to crack the hash used by Syskey. He needs to configure the encryption level before he can launch attach. How many bits does Syskey use for encryption?

• A.40 bit
• B.128 bit
• C.256 bit
• D.64 bit

What is the main difference between a "Normal" SQL Injection and a "Blind" SQL Injection vulnerability?

• A.The request to the web server is not visible to the administrator of the vulnerable application.
• B.The attack is called "Blind" because, although the application properly filters user input, it is still vulnerable to code injection.
• C.The successful attack does not show an error message to the administrator of the affected application.
• D.The vulnerable application does not display errors with information about the injection results to the attacker.

A very useful resource for passively gathering information about a target company is:

• A.Traceroute
• B.Whois search
• C.Ping sweep
• D.Host scanning

_____________ is a type of symmetric-key encryption algorithm that transforms a fixed-length block of plaintext (unencrypted text) data into a block of ciphertext (encrypted text) data of the same length.

• A.Stream Cipher
• B.Bit Cipher
• C.Hash Cipher
• D.Block Cipher