GAQM Certified Professional Ethical Hacker (CPEH) (CPEH-001) Free Practice Test
Question 1
What are the default passwords used by SNMP? (Choose two.)
Correct Answer: B,F
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 2
If an attacker's computer sends an IPID of 24333 to a zombie (Idle Scanning) computer on a closed port, what will be the response?
Correct Answer: D
Question 3
The network administrator at Spears Technology, Inc has configured the default gateway Cisco router's access-list as below:
You are hired to conduct security testing on their network. You successfully brute-force the SNMP community string using a SNMP crack tool. The access-list configured at the router prevents you from establishing a successful connection. You want to retrieve the Cisco configuration from the router. How would you proceed?
You are hired to conduct security testing on their network. You successfully brute-force the SNMP community string using a SNMP crack tool. The access-list configured at the router prevents you from establishing a successful connection. You want to retrieve the Cisco configuration from the router. How would you proceed?
Correct Answer: C,D
Question 4
Choose one of the following pseudo codes to describe this statement:
"If we have written 200 characters to the buffer variable, the stack should stop because it cannot hold any more data."
"If we have written 200 characters to the buffer variable, the stack should stop because it cannot hold any more data."
Correct Answer: A
Question 5
Why would an attacker want to perform a scan on port 137?
Correct Answer: B
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 6
Jake is a network administrator who needs to get reports from all the computer and network devices on his network. Jake wants to use SNMP but is afraid that won't be secure since passwords and messages are in clear text. How can Jake gather network information in a secure manner?
Correct Answer: C
Question 7
Which of the following is not considered to be a part of active sniffing?
Correct Answer: A
Question 8
What hacking attack is challenge/response authentication used to prevent?
Correct Answer: A
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 9
Who is an Ethical Hacker?
Correct Answer: A
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).
Question 10
What is the best defense against privilege escalation vulnerability?
Correct Answer: A
Question 11
Eve decides to get her hands dirty and tries out a Denial of Service attack that is relatively new to her. This time she envisages using a different kind of method to attack Brownies Inc. Eve tries to forge the packets and uses the broadcast address. She launches an attack similar to that of fraggle. What is the technique that Eve used in the case above?
Correct Answer: B
Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).