Certified Ethical Hacker Exam (CEH v12) Free Questions - Part 21

Question No : 301) Todd has been asked by the security officer to purchase a counter-based authentication system. Which of the following best describes this type of system?
A. A biometric system that bases authentication decisions on behavioral attributes. 

B. A biometric system that bases authentication decisions on physical attributes.

C. An authentication system that creates one-time passwords that are encrypted with secret keys.

D. An authentication system that uses passphrases that are converted into virtual passwords.

Question No : 302) Given below are different steps involved in the vulnerability-management life cycle.
1) Remediation

2) Identify assets and create a baseline
3) Verification
4) Monitor
5) Vulnerability scan
6) Risk assessment
Identify the correct sequence of steps involved in vulnerability management.
A. 2-->5-->6-->1-->3-->4 

B. 2-->1-->5-->6-->4-->3 

C. 2-->4-->5-->3-->6--> 1 

D. 1-->2-->3-->4-->5-->6

Question No : 303) You have successfully logged on a Linux system. You want to now cover your trade Your login attempt may be logged on several files located in /var/log. Which file does NOT belongs to the list:
A. user.log 

B. auth.fesg 

C. wtmp

D. btmp

Question No : 304) An attacker has installed a RAT on a host. The attacker wants to ensure that when a user attempts to go to "www.MyPersonalBank.com", the user is directed to a phishing site. Which file does the attacker need to modify?
A. Boot.ini 

B. Sudoers 

C. Networks

D. Hosts

Question No : 305) Miley, a professional hacker, decided to attack a target organization's network. To perform the attack, she used a tool to send fake ARP messages over the target network to link her MAC address with the target system's IP address. By performing this, Miley received messages directed to the victim's MAC address and further used the tool to intercept, steal, modify, and block sensitive communication to the target system. What is the tool employed by Miley to perform the above attack?
A. Gobbler

B. KDerpNSpoof 

C. BetterCAP

D. Wireshark

Question No : 306) Based on the below log, which of the following sentences are true? Mar 1, 2016, 7:33:28 AM 10.240.250.23 - 54373 10.249.253.15 - 22 tcp_ip
A. Application is FTP and 10.240.250.23 is the client and 10.249.253.15 is the server.

B. Application is SSH and 10.240.250.23 is the server and 10.249.253.15 is the client. 

C. SSH communications are encrypted; it’s impossible to know who is the client or the server.

D. Application is SSH and 10.240.250.23 is the client and 10.249.253.15 is the server.

Question No : 307) Clark is a professional hacker. He created and configured multiple domains pointing to the same host to switch quickly between the domains and avoid detection.Identify the behavior of the adversary In the above scenario.
A. use of command-line interface 

B. Data staging

C. Unspecified proxy activities

D. Use of DNS tunneling

Question No : 308) If executives are found liable for not properly protecting their company’s assets and information systems, what type of law would apply in this situation?
A. Criminal

B. International 

C. Common

D. Civil

Question No : 309) ViruXine.W32 virus hides their presence by changing the underlying executable code. This Virus code mutates while keeping the original algorithm intact, the code changes itself each time it runs, but the function of the code (its semantics) will not change at all.

Here is a section of the Virus code

What is this technique called?

A. Polymorphic Virus 

B. Metamorphic Virus 

C. Dravidic Virus

D. Stealth Virus

Question No : 310) What is correct about digital signatures?
A. A digital signature cannot be moved from one signed document to another because it is the hash of the original document encrypted with the private key of the signing party.
B. Digital signatures may be used in different documents of the same type.
C. A digital signature cannot be moved from one signed document to another because it is a plain hash of the document content.
D. Digital signatures are issued once for each user and can be used everywhere until they expire.

Question No : 311) Which of the following is a passive wireless packet analyzer that works on Linux-based systems?
A. Burp Suite 

B. OpenVAS 

C. tshark

D. Kismet

Question No : 312) Which service in a PKI will vouch for the identity of an individual or company?
A. KDC

B. CR 

C. CBC 

D. CA

Question No : 313) Which tier in the N-tier application architecture is responsible for moving and processing data between the tiers?
A. Presentation tier 

B. Application Layer 

C. Logic tier

D. Data tie

Question No : 314) Bob, your senior colleague, has sent you a mail regarding a deal with one of the clients. You are requested to accept the offer and you oblige. After 2 days. Bob denies that he had ever sent a mail. What do you want to ""know"" to prove yourself that it was Bob who had send a mail?
A. Authentication 

B. Confidentiality 

C. Integrity

D. Non-Repudiation

Question No : 315) You are tasked to configure the DHCP server to lease the last 100 usable IP addresses in subnet to. 1.4.0/23. Which of the following IP addresses could be teased as a result of the new configuration?

A. 210.1.55.200 

B. 10.1.4.254 

C. 10..1.5.200 

D. 10.1.4.156

 

312-50v12 Answers

 

 

Part 1

Part 2

Part 3

Part 4

Part 5

Part 6

Part 7

Part 8

Part 9

Part 10

Part 11

Part 12

Part 13

Part 14

Part 15

Part 16

Part 17

Part 18

Part 19

Part 20

Part 21

Part 22

Part 23

Part 24

Part 25

Part 26

Part 27

Part 28

Part 29

Part 30

Part 31

Part 32

Part 33

Part 34

Part 35