CEH Final Exam Study Guide – Practice Questions, Flashcards & Ethical
Hacking Review
You are reviewing source code for any buffer overflow vulnerabilities. The following C++ source
code handles data extracted from a compressed file:
if (extractedDataLength < 65536) {//Break down data into multiple chunks}else {//Handle data
in one large chunk}
The data should be broken down into multiple chunks only when the buffer of 65,536 characters
is reached or exceeded. How should you modify the condition in the first line of the code? - ANS
✔✔Change to extractedDataLength >= 65536
You have recently discovered that an attacker used the tcp-over-dns tool on your company's
network.
What is this tool meant to accomplish in an attack? - ANS ✔✔Firewall evasion
You need to exchange confidential information with a trusted partner. The partner indicates to
you that he will issue certificates. These certificates are signed by the same entity that verifies
the certificate's identity. Which term is used for the type of certificate issued by the partner? -
ANS ✔✔Self-signed certificates
What item is contained in the digital certificate that enables the receiver of the certificate to
send an encrypted email to the sender? - ANS ✔✔Public key
You need to create a NOP slide using the Metasploit Framework. Which module should you
use? - ANS ✔✔x86/opty2
You have decided to implement both client and server PKI certificates to be used by all systems
when authenticating to the corporate web site. What type of attack can this help prevent? - ANS
✔✔Man-in-the-middle attacks
Hacking Review
You are reviewing source code for any buffer overflow vulnerabilities. The following C++ source
code handles data extracted from a compressed file:
if (extractedDataLength < 65536) {//Break down data into multiple chunks}else {//Handle data
in one large chunk}
The data should be broken down into multiple chunks only when the buffer of 65,536 characters
is reached or exceeded. How should you modify the condition in the first line of the code? - ANS
✔✔Change to extractedDataLength >= 65536
You have recently discovered that an attacker used the tcp-over-dns tool on your company's
network.
What is this tool meant to accomplish in an attack? - ANS ✔✔Firewall evasion
You need to exchange confidential information with a trusted partner. The partner indicates to
you that he will issue certificates. These certificates are signed by the same entity that verifies
the certificate's identity. Which term is used for the type of certificate issued by the partner? -
ANS ✔✔Self-signed certificates
What item is contained in the digital certificate that enables the receiver of the certificate to
send an encrypted email to the sender? - ANS ✔✔Public key
You need to create a NOP slide using the Metasploit Framework. Which module should you
use? - ANS ✔✔x86/opty2
You have decided to implement both client and server PKI certificates to be used by all systems
when authenticating to the corporate web site. What type of attack can this help prevent? - ANS
✔✔Man-in-the-middle attacks
