Exam 5: ECCouncil Computer Hacking Forensic Investigator

Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?

Stuart has successfully cracked the WPA-PSK password during his wireless pen testing assignment. However, he is unable to connect to the access point using this password. What could be the probable reason?

Which property ensures that a hash function will not produce the same hashed value for two different messages?

GenSec Inc, a UK-based company, uses Oracle database to store all its data. The company also uses Oracle DataBase Vault to restrict users access to specific areas of their database. GenSec hired a senior penetration tester and security auditor named Victor to check the vulnerabilities of the company's Oracle DataBase Vault. He was asked to find all the possible vulnerabilities that can bypass the company's Oracle DB Vault. Victor tried different kinds of attacks to penetrate into the company's Oracle DB Vault and succeeded. Which of the following attacks can help Victor to bypass GenSec's Oracle DB Vault?

Windows file servers commonly hold sensitive files, databases, passwords and more.  Which of the following choices would be a common vulnerability that usually exposes them?

Harry, a penetration tester in SqSac Solutions Ltd., is trying to check if his company's SQL server database is vulnerable. He also wants to check if there are any loopholes present that can enable the perpetrators to exploit and gain access to the user account login details from the database. After performing various test attempts, finally Harry executes an SQL query that enabled him to extract all the available Windows Login Account details. Which of the following SQL queries did Harry execute to obtain the information?

Which method can provide a better return on IT security investment and provide a thorough and comprehensive assessment of organizational security covering policy, procedure design, and implementation?

James, a penetration tester, found a SQL injection vulnerability in the website http://www.xsecurity.com. He used sqlmap and extracted the website's databases from the sql server, one of them being "offices." Which among the following sqlmap queries does James issue in order to extract the tables related to the database "offices"?

Which of the following items is unique to the N-tier architecture method of designing software applications?

Which of the following is a characteristic of Public Key Infrastructure (PKI)?

A pentester gains access to a Windows application server and needs to determine the settings of the built-in Windows firewall. Which command would be used?

How can a rootkit bypass Windows 7 operating system's kernel mode, code signing policy?

Charles, a network penetration tester, is part of a team assessing the security of perimeter devices of an organization. He is using the following Nmap command to bypass the firewall: nmap -D 10.10.8.5, 192.168.168.9, 10.10.10.12 What Charles is trying to do?

Analyze the ICMP packet below and mark the correct statement.

Which command lets a tester enumerate alive systems in a class C network via ICMP using native Windows tools?

What is the purpose of the Traceroute command?

Which Open Web Application Security Project (OWASP) implements a web application full of known vulnerabilities?

This asymmetry cipher is based on factoring the product of two large prime numbers. What cipher is described above?

John the Ripper is a technical assessment tool used to test the weakness of which of the following?

Which vital role does the U.S. Computer Security Incident Response Team (CSIRT) provide?