312-49v10 Free Practice Test

- (Exam Topic 1)
Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Using Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?

1. A. Closed
2. B. Open
3. C. Stealth
4. D. Filtered

Correct Answer: B

- (Exam Topic 1)
After passing her CEH exam, Carol wants to ensure that her network is completely secure. She implements a DMZ, stateful firewall, NAT, IPSEC, and a packet filtering firewall. Since all security measures were taken, none of the hosts on her network can reach the Internet. Why is that?

1. A. Stateful firewalls do not work with packet filtering firewalls
2. B. NAT does not work with stateful firewalls
3. C. IPSEC does not work with packet filtering firewalls
4. D. NAT does not work with IPSEC

Correct Answer: D

- (Exam Topic 1)
You are a security analyst performing a penetration tests for a company in the Midwest. After some initial reconnaissance, you discover the IP addresses of some Cisco routers used by the company. You type in the following URL that includes the IP address of one of the routers:
http://172.168.4.131/level/99/exec/show/config
After typing in this URL, you are presented with the entire configuration file for that router. What have you discovered?

1. A. HTTP Configuration Arbitrary Administrative Access Vulnerability
2. B. HTML Configuration Arbitrary Administrative Access Vulnerability
3. C. Cisco IOS Arbitrary Administrative Access Online Vulnerability
4. D. URL Obfuscation Arbitrary Administrative Access Vulnerability

Correct Answer: A

- (Exam Topic 3)
An attacker successfully gained access to a remote Windows system and plans to install persistent backdoors on it. Before that, to avoid getting detected in future, he wants to cover his tracks by disabling the
last-accessed timestamps of the machine. What would he do to achieve this?

1. A. Set the registry value of HKLM\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate to 0
2. B. Run the command fsutil behavior set disablelastaccess 0
3. C. Set the registry value of HKLM\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate to 1
4. D. Run the command fsutil behavior set enablelastaccess 0

Correct Answer: C

- (Exam Topic 2)
What file is processed at the end of a Windows XP boot to initialize the logon dialog box?

1. A. NTOSKRNL.EXE
2. B. NTLDR
3. C. LSASS.EXE
4. D. NTDETECT.COM

Correct Answer: A