CPEH-001 試験問題を無料オンラインアクセス

Which of the following Registry location does a Trojan add entries to make it persistent on Windows 7? (Select 2 answers)

• A.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• B.HKEY_CURRENT_USER\Software\Microsoft\Windows\System32\CurrentVersion\Run
• C.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\System32\CurrentVersion\ Run
• D.HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

TCP packets transmitted in either direction after the initial three-way handshake will have which of the following bit set?

• A.SYN flag
• B.XMAS flag
• C.ACK flag
• D.FIN flag

Which of the following types of firewall inspects only header information in network traffic?

• A.Stateful inspection
• B.Application-level gateway
• C.Packet filter
• D.Circuit-level gateway

What type of Virus is shown here?

• A.Metamorphic Virus
• B.Cavity Virus
• C.Sparse Infector Virus
• D.Macro Virus
• E.Boot Sector Virus

In the following example, which of these is the "exploit"?
Today, Microsoft Corporation released a security notice. It detailed how a person could bring down the Windows 2003 Server operating system, by sending malformed packets to it. They detailed how this malicious process had been automated using basic scripting. Even worse, the new automated method for bringing down the server has already been used to perform denial of service attacks on many large commercial websites. Select the best answer.

• A.Windows 2003 Server
• B.Microsoft Corporation is the exploit.
• C.The exploit is the hacker that would use this vulnerability.
• D.The security "hole" in the product is the exploit.
• E.The documented method of how to use the vulnerability to gain unprivileged access.
  Explanations:
  Microsoft is not the exploit, but if Microsoft documents how the vulnerability can be used to gain unprivileged access, they are creating the exploit. If they just say that there is a hole in the product, then it is only a vulnerability. The security "hole" in the product is called the "vulnerability". It is documented in a way that shows how to use the vulnerability to gain unprivileged access, and it then becomes an "exploit". In the example given, Windows 2003 Server is the TOE (Target of Evaluation). A TOE is an IT System, product or component that requires security evaluation or is being identified. The hacker that would use this vulnerability is exploiting it, but the hacker is not the exploit. The documented method of how to use the vulnerability to gain unprivileged access is the correct answer.