Question 1

A computer science student needs to fill some information into a secured Adobe PDF job application that was received from a prospective employer. Instead of requesting a new document that allowed the forms to be completed, the student decides to write a script that pulls passwords from a list of commonly used passwords to try against the secured PDF until the correct password is found or the list is exhausted. Which cryptography attack is the student attempting?

Accepted Answer

The student is attempting a dictionary attack, which involves trying a list of commonly used passwords to gain unauthorized access.

Question 2

While performing data validation of web content, a security technician is required to restrict malicious input. Which of the following processes is an efficient way of restricting malicious input?

Accepted Answer

Validating web content input for type, length, and range is an efficient way to ensure that the input adheres to expected parameters, reducing the risk of malicious input.

Question 3

Which of the following processes evaluates the adherence of an organization to its stated security policy?

Accepted Answer

Security auditing is the process that evaluates an organization's adherence to its stated security policy by reviewing and examining its security measures and controls.

Question 4

A security analyst is performing an audit on the network to determine if there are any deviations from the security policies in place. The analyst discovers that a user from the IT department had a dial-out modem installed. Which security policy must the security analyst check to see if dial-out modems are allowed?

Accepted Answer

The remote-access policy would cover the use of dial-out modems, as it defines how users can connect to the organization's network from remote locations.

Question 5

Low humidity in a data center can cause which of the following problems?

Accepted Answer

Low humidity can lead to an increase in static electricity, which can damage sensitive electronic components in a data center.

Question 6

Which of the following is a symmetric cryptographic standard?

Accepted Answer

3DES (Triple Data Encryption Standard) is a symmetric key encryption algorithm, meaning it uses the same key for both encryption and decryption.

Question 7

Which of the following resources does NMAP need to be used as a basic vulnerability scanner covering several vectors like SMB, HTTP and FTP?

Accepted Answer

NMAP uses its own scripting engine, known as the NMAP Scripting Engine (NSE), to perform various tasks including vulnerability scanning across different protocols like SMB, HTTP, and FTP.

Question 8

Which of the following scanning tools is specifically designed to find potential exploits in Microsoft Windows products?

Accepted Answer

Microsoft Baseline Security Analyzer is a tool specifically designed to find potential exploits in Microsoft Windows products.

Question 9

When analyzing the IDS logs, the system administrator noticed an alert was logged when the external router was accessed from the administrator's computer to update the router configuration. What type of an alert is this?

Accepted Answer

This is a false positive because the alert was triggered by legitimate activity (the administrator accessing the router for configuration), not by a malicious action.

Question 10

How can telnet be used to fingerprint a web server?

Accepted Answer

Using telnet to connect to a web server on port 80 and sending the "HEAD / HTTP/1.0" request can reveal server information in the response headers, which helps in fingerprinting the server.

Question 11

What is the main reason the use of a stored biometric is vulnerable to an attack?

Accepted Answer

A stored biometric can be stolen and used by an attacker to impersonate the individual identified by the biometric, making it vulnerable to attacks.

Question 12

Which property ensures that a hash function will not produce the same hashed value for two different messages?

Accepted Answer

Collision resistance is the property of a hash function that ensures it is computationally infeasible to find two different messages that produce the same hashed value.

Question 13

A consultant is hired to do physical penetration testing at a large financial company. In the first day of his assessment, the consultant goes to the company`s building dressed like an electrician and waits in the lobby for an employee to pass through the main access gate, then the consultant follows the employee behind to get into the restricted area. Which type of attack did the consultant perform?

Accepted Answer

The consultant performed tailgating, which involves following an authorized person into a restricted area without proper credentials.

Question 14

When creating a security program, which approach would be used if senior management is supporting and enforcing the security policy?

Accepted Answer

A top-down approach is used when senior management supports and enforces the security policy, as it involves leadership setting the tone and direction for security initiatives.

Question 15

What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

Accepted Answer

The Common Criteria is an international standard (ISO/IEC 15408) that provides a framework for evaluating the security features and capabilities of IT products, ensuring they meet a baseline level of security.

Question 16

A security consultant is trying to bid on a large contract that involves penetration testing and reporting. The company accepting bids wants proof of work so the consultant prints out several audits that have been performed. Which of the following is likely to occur as a result?

Accepted Answer

Providing audits from other companies as proof of work may inadvertently expose those companies' vulnerabilities, which is a breach of confidentiality and could lead to legal and ethical issues.

Question 17

A security consultant decides to use multiple layers of anti-virus defense, such as end user desktop anti-virus and E-mail gateway.  This approach can be used to mitigate which kind of attack?

Accepted Answer

Using multiple layers of anti-virus defense helps mitigate social engineering attacks by detecting and blocking malicious software that may be delivered through email or other means, which are common vectors in social engineering tactics.

Question 18

Which type of scan is used on the eye to measure the layer of blood vessels?

Accepted Answer

A retinal scan is used to measure the layer of blood vessels in the eye.

Question 19

During a wireless penetration test, a tester detects an access point using WPA2 encryption. Which of the following attacks should be used to obtain the key?

Accepted Answer

The tester can capture the WPA2 authentication handshake and then attempt to crack it using tools like Aircrack-ng. This is a common method for attempting to obtain the key for WPA2-secured networks.

Question 20

Which type of antenna is used in wireless communication?

Accepted Answer

Omnidirectional antennas are used in wireless communication because they can transmit and receive signals in all directions.

Exam 5: ECCouncil Computer Hacking Forensic Investigator