Question 1

Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?

Accepted Answer

A)  Certificate issuance 
B)  Certificate validation 
C)  Certificate cryptography 
D)  Certificate revocation

Question 2

Stuart has successfully cracked the WPA-PSK password during his wireless pen testing assignment. However, he is unable to connect to the access point using this password. What could be the probable reason?

Accepted Answer

A)  It is a rogue access point 
B)  The access point implements another layer of WEP encryption 
C)  The access point implements a signal jammer to protect from attackers 
D)  The access point implements MAC filtering

Question 3

Which property ensures that a hash function will not produce the same hashed value for two different messages?

Accepted Answer

A)  Collision resistance 
B)  Bit length 
C)  Key strength 
D)  Entropy

Question 4

GenSec Inc, a UK-based company, uses Oracle database to store all its data. The company also uses Oracle DataBase Vault to restrict users access to specific areas of their database. GenSec hired a senior penetration tester and security auditor named Victor to check the vulnerabilities of the company's Oracle DataBase Vault. He was asked to find all the possible vulnerabilities that can bypass the company's Oracle DB Vault. Victor tried different kinds of attacks to penetrate into the company's Oracle DB Vault and succeeded. Which of the following attacks can help Victor to bypass GenSec's Oracle DB Vault?

Accepted Answer

A)  Man-in-the-Middle Attack 
B)  Denial-of-Service Attack 
C)  Replay Attack 
D)  SQL Injection

Question 5

Windows file servers commonly hold sensitive files, databases, passwords and more.  Which of the following choices would be a common vulnerability that usually exposes them?

Accepted Answer

A)  Cross-site scripting 
B)  SQL injection 
C)  Missing patches 
D)  CRLF injection

Question 6

Harry, a penetration tester in SqSac Solutions Ltd., is trying to check if his company's SQL server database is vulnerable. He also wants to check if there are any loopholes present that can enable the perpetrators to exploit and gain access to the user account login details from the database. After performing various test attempts, finally Harry executes an SQL query that enabled him to extract all the available Windows Login Account details. Which of the following SQL queries did Harry execute to obtain the information?

Accepted Answer

A)  SELECT name FROM sys.server_principals WHERE TYPE = 'R' 
B)  SELECT name FROM sys.server_principals WHERE TYPE = 'U' 
C)  SELECT name FROM sys.server_principals WHERE TYPE = 'G' 
D)  SELECT name FROM sys.server_principals WHERE TYPE = 'S'

Question 7

Which method can provide a better return on IT security investment and provide a thorough and comprehensive assessment of organizational security covering policy, procedure design, and implementation?

Accepted Answer

A)  Penetration testing 
B)  Social engineering 
C)  Vulnerability scanning 
D)  Access control list reviews

Question 8

James, a penetration tester, found a SQL injection vulnerability in the website http://www.xsecurity.com. He used sqlmap and extracted the website's databases from the sql server, one of them being "offices." Which among the following sqlmap queries does James issue in order to extract the tables related to the database "offices"?

Accepted Answer

A)  sqlmap -u "www.xsecurity.com" --dbs offices -T 
B)  sqlmap -u "www.xsecurity.com" --dbs offices --T 
C)  sqlmap -u "www.xsecurity.com" --dbs offices -tables 
D)  sqlmap -u "www.xsecurity.com" --dbs offices --tables

Question 9

Which of the following items is unique to the N-tier architecture method of designing software applications?

Accepted Answer

A)  Application layers can be separated, allowing each layer to be upgraded independently from other layers. 
B)  It is compatible with various databases including Access, Oracle, and SQL. 
C)  Data security is tied into each layer and must be updated for all layers when any upgrade is performed. 
D)  Application layers can be written in C, ASP.NET, or Delphi without any performance loss.

Question 10

Which of the following is a characteristic of Public Key Infrastructure (PKI)?

Accepted Answer

A)  Public-key cryptosystems are faster than symmetric-key cryptosystems. 
B)  Public-key cryptosystems distribute public-keys within digital signatures. 
C)  Public-key cryptosystems do not require a secure key distribution channel. 
D)  Public-key cryptosystems do not provide technical non-repudiation via digital signatures.

Question 11

A pentester gains access to a Windows application server and needs to determine the settings of the built-in Windows firewall. Which command would be used?

Accepted Answer

A)  Netsh firewall show config 
B)  WMIC firewall show config 
C)  Net firewall show config 
D)  Ipconfig firewall show config

Question 12

How can a rootkit bypass Windows 7 operating system's kernel mode, code signing policy?

Accepted Answer

A)  Defeating the scanner from detecting any code change at the kernel 
B)  Replacing patch system calls with its own version that hides the rootkit (attacker's) actions 
C)  Performing common services for the application process and replacing real applications with fake ones 
D)  Attaching itself to the master boot record in a hard drive and changing the machine's boot sequence/options

Question 13

Charles, a network penetration tester, is part of a team assessing the security of perimeter devices of an organization. He is using the following Nmap command to bypass the firewall: nmap -D 10.10.8.5, 192.168.168.9, 10.10.10.12 What Charles is trying to do?

Accepted Answer

A)  Packet Fragmentation 
B)  Cloaking a scan with decoys 
C)  Spoofing source address 
D)  Spoofing source port number

Question 14

Analyze the ICMP packet below and mark the correct statement.

Accepted Answer

A)  It is a ping packet that requires fragmentation, but the Don't Fragment flag is set 
B)  It is a ping request, but the destination port is unreachable 
C)  It is a ping response, when the destination host is unknown 
D)  It is a ping request, but the destination network is unreachable

Question 15

Which command lets a tester enumerate alive systems in a class C network via ICMP using native Windows tools?

Accepted Answer

A)  ping 192.168.2. 
B)  ping 192.168.2.255 
C)  for %V in (1 1 255) do PING 192.168.2.%V 
D)  for /L %V in (1 1 254) do PING -n 1 192.168.2.%V | FIND /I "Reply"

Question 16

What is the purpose of the Traceroute command?

Accepted Answer

A)  For extracting information about the network topology, trusted routers, and firewall locations 
B)  For extracting information about closed ports 
C)  For extracting information about the server functioning 
D)  For extracting information about opened ports

Question 17

Which Open Web Application Security Project (OWASP) implements a web application full of known vulnerabilities?

Accepted Answer

A)  WebBugs 
B)  WebGoat 
C)  VULN_HTML 
D)  WebScarab

Question 18

This asymmetry cipher is based on factoring the product of two large prime numbers. What cipher is described above?

Accepted Answer

A)  RSA 
B)  SHA 
C)  RC5 
D)  MD5

Question 19

John the Ripper is a technical assessment tool used to test the weakness of which of the following?

Accepted Answer

A)  Usernames 
B)  File permissions 
C)  Firewall rulesets 
D)  Passwords

Question 20

Which vital role does the U.S. Computer Security Incident Response Team (CSIRT) provide?

Accepted Answer

A)  Incident response services to any user, company, government agency, or organization in partnership with the Department of Homeland Security 
B)  Maintenance of the nation's Internet infrastructure, builds out new Internet infrastructure, and decommissions old Internet infrastructure 
C)  Registration of critical penetration testing for the Department of Homeland Security and public and private sectors 
D)  Measurement of key vulnerability assessments on behalf of the Department of Defense (DO
D)  and State Department, as well as private sectors

Exam 5: ECCouncil Computer Hacking Forensic Investigator