CPEH-001 무료 덤프문제 온라인 액세스

Statistics from cert.org and other leading security organizations has clearly showed a steady rise in the number of hacking incidents perpetrated against companies. What do you think is the main reason behind the significant increase in hacking attempts over the past years?

• A.New TCP/IP stack features are constantly being added.
• B.It is getting more challenging and harder to hack for non technical people.
• C.The ease with which hacker tools are available on the Internet.
• D.There is a phenomenal increase in processing power.

What information should an IT system analysis provide to the risk assessor?

• A.Impact analysis
• B.Security architecture
• C.Threat statement
• D.Management buy-in

Which of the following is a component of a risk assessment?

• A.Logical interface
• B.Administrative safeguards
• C.DMZ
• D.Physical security

Which type of sniffing technique is generally referred as MiTM attack?

• A.DHCP Sniffing
• B.Password Sniffing
• C.Mac Flooding
• D.ARP Poisoning

Exhibit:

You are conducting pen-test against a company's website using SQL Injection techniques. You enter "anuthing or 1=1-" in the username filed of an authentication form. This is the output returned from the server. What is the next step you should do?

• A.Identify the database and table name by running:
  http://www.example.com/order/include_rsa.asp?pressReleaseID=5
  AND
  ascii(lower(substring((SELECT TOP 1 name FROM sysobjects WHERE
  xtype='U'), 1))) > 109
• B.Format the C: drive and delete the database by running:
  http://www.example.com/order/include_rsa.asp?pressReleaseID=5 AND
  xp_cmdshell 'format c: /q /yes '; drop database myDB; --
• C.Identify the user context of the web application by running_
  http://www.example.com/order/include_rsa_asp?pressReleaseID=5
  AND
  USER_NAME() = 'dbo'
• D.Reboot the web server by running:
  http://www.example.com/order/include_rsa.asp?pressReleaseID=5
  AND xp_cmdshell 'iisreset -reboot'; --