CPEH-001 試験問題を無料オンラインアクセス

Kevin is an IT security analyst working for Emerson Time Makers, a watch manufacturing company in Miami. Kevin and his girlfriend Katy recently broke up after a big fight. Kevin believes that she was seeing another person. Kevin, who has an online email account that he uses for most of his mail, knows that Katy has an account with that same company. Kevin logs into his email account online and gets the following URL after successfully logged in: http://www.youremailhere.com/mail.asp?mailbox=Kevin&Smith=121%22 Kevin changes the URL to: http://www.youremailhere.com/mail.asp?mailbox=Katy&Sanchez=121%22 Kevin is trying to access her email account to see if he can find out any information. What is Kevin attempting here to gain access to Katy's mailbox?

• A.By changing the mailbox's name in the URL, Kevin is attempting directory transversal
• B.He is attempting a path-string attack to gain access to her mailbox
• C.This type of attempt is called URL obfuscation when someone manually changes a URL to try and gain unauthorized access
• D.Kevin is trying to utilize query string manipulation to gain access to her email account

Lori is a Certified Ethical Hacker as well as a Certified Hacking Forensics Investigator working as an IT security consultant. Lori has been hired on by Kiley Innovators, a large marketing firm that recently underwent a string of thefts and corporate espionage incidents. Lori is told that a rival marketing company came out with an exact duplicate product right before Kiley Innovators was about to release it. The executive team believes that an employee is leaking information to the rival company. Lori questions all employees, reviews server logs, and firewall logs; after which she finds nothing. Lori is then given permission to search through the corporate email system. She searches by email being sent to and sent from the rival marketing company. She finds one employee that appears to be sending very large email to this other marketing company, even though they should have no reason to be communicating with them. Lori tracks down the actual emails sent and upon opening them, only finds picture files attached to them. These files seem perfectly harmless, usually containing some kind of joke. Lori decides to use some special software to further examine the pictures and finds that each one had hidden text that was stored in each picture. What technique was used by the Kiley Innovators employee to send information to the rival marketing company?

• A.The method used by the employee to hide the information was logical watermarking
• B.The Kiley Innovators employee used cryptography to hide the information in the emails sent
• C.By using the pictures to hide information, the employee utilized picture fuzzing
• D.The employee used steganography to hide information in the picture attachments

Which of the following is a component of a risk assessment?

• A.Logical interface
• B.Physical security
• C.Administrative safeguards
• D.DMZ

Steven the hacker realizes the network administrator of Acme Corporation is using syskey in Windows 2008 Server to protect his resources in the organization. Syskey independently encrypts the hashes so that physical access to the server, tapes, or ERDs is only first step to cracking the passwords. Steven must break through the encryption used by syskey before he can attempt to use brute force dictionary attacks on the hashes. Steven runs a program called "SysCracker" targeting the Windows 2008 Server machine in attempting to crack the hash used by Syskey. He needs to configure the encryption level before he can launch the attack. How many bits does Syskey use for encryption?

• A.40-bit encryption
• B.64-bit encryption
• C.128-bit encryption
• D.256-bit encryption

An NMAP scan of a server shows port 25 is open. What risk could this pose?

• A.Clear text authentication
• B.Open printer sharing
• C.Web portal data leak
• D.Active mail relay