Correct Amswer:

Continue testing is correct.

CEH and real-life circumstance often don’t line up. Your agreement documentation should be iron clad and cover what your actions should be in any given event. Outside of any specific direction provided, in this circumstance you should just continue testing. Your team does not know what is on these systems or why it is stored there, and any other action may put you in legal trouble. Document, and move on.

Incorrect Answers:

Report the finding to the systems administrator immediately, store the file elsewhere and delete it from the machine, and use the credentials to log in to the bank account and leverage attacks into that system are incorrect.

Unless specifically directed, discovery of any particular finding is not cause to stop and report findings immediately.

The remaining answers are unethical.

Correct Answer:

Vulnerability assessment is correct.

A vulnerability assessment only points out potential problems to the client.

Incorrect Answers:

Scanning assessment, penetration test, and none of the above are incorrect.

These choices do not comply with what the question is asking. Pen testers will definitely take advantage of open vulnerabilities (provided they’re within the boundaries of the test scope). Scanning assessment is not a valid term.

Correct Answer:

Http-methods is correct.

Per Nmap’s website (https://nmap.org), the http-methods script “finds out what options are supported by an HTTP server by sending an OPTIONS request and lists potentially risky methods. Any output other than 501/405 suggests that the method is if not in the range 400 to 600. If the response falls under that range then it is compared to the response from a randomly generated method. In this script, ‘potentially risky’ methods are anything except GET, HEAD, POST, and OPTIONS.”

Incorrect Answers:

Http-get, http-headers, and http-risk are incorrect.

These are not valid Nmap scripts.

Correct Answer:

Zeus is correct.

Zeus is an e-banking Trojan for stealing bank and credit card information, not ransomware.

Incorrect Answers:

Cryptorbit, Cryptolocker, and police-themed are incorrect.

The ransomware family is composed of Cryptorbit, Cryptolocker, Cryptodefense, Cryptowall, and police-themed ransomware.

Correct Answer:

AES is correct.

Message integrity check (MIC, also known as Michael) is a feature of WPA that provides for integrity checking and, therefore, helps protect against man-in-the-middle attacks. MIC calculates an 8-byte field and places it between the data portion of the frame and the 4-byte ICV (integrity check value). It also includes a sequence number to wireless packets, and if the WAP receives packets out of order, it will drop them.

Incorrect Answers:

AES, RC4, and CCMP are incorrect.

AES and RC4 are encryption algorithms.

CCMP does provide for integrity checking, but it’s part of WPA2, not WPA.

Correct Answer:

CurrPorts is correct.

CurrPorts is network monitoring software that displays the list of all currently opened TCP/IP and UDP ports on your local computer. For each port in the list, information about the process that opened the port is also displayed, including the process name, full path of the process, version information of the process (product name, file description, and so on), the time that the process was created, and the user who created it. CurrPorts also allows you to close unwanted TCP connections, kill the process that opened the ports, and save the TCP/UDP ports information to an HTML file, an XML file, or a tab-delimited text file.

Incorrect Answers:

Neverquest, Listport, and Darlloz are incorrect.

Neverquest and Darlloz are malware-analysis tools.

Listport is not a real tool.

Correct Answer:

Perturbation is correct.

A fault injection (aka perturbation) attack occurs when a malicious actor injects a faulty signal into the system.

Incorrect Answers:

Optical, body bias injection, and frequency tampering are incorrect.

Fault injection attacks come in several main types: optical, electromagnet fault injection (EMFI), body bias injection (BBI, using laser or electromagnetic pulses), power or clock glitching (affecting power supply or clock), frequency or voltage tampering (tampering with operating conditions themselves), and temperature attacks (altering temperature for the chip).

Correct Answer:

PKI is correct.

A Kerberos system is composed of a Key Distribution Center (KDC), an Authentication Service (AS), a Ticket Granting Service (TGS), and a Ticket Granting Ticket (TGT). PKI has nothing to do with it.

Incorrect Answers:

KDC, AS, TGS, and TGT are incorrect.

These are all part of a Kerberos system.

Correct Answer:

Physical is correct.

Physical measures include all the things you can touch, taste, smell, or get shocked by. Examples of physical controls include bollards, lighting, locks, fences, and guards with tasers or accompanied by angry German Shepherds.

Incorrect Answers:

Technical, operational, and aggressive are incorrect.

Technical measures are taken with technology in mind to protect explicitly at the physical level (smartcards and biometrics, for example).

Operational measures are the policies and procedures you set up to enforce a security-minded operation.

Aggressive is not a valid security control measure.

Correct Answers:

Private clouds are for the exclusive use of one organization and infrastructure is shared by several organizations in a community cloud are correct.

A private cloud is operated solely for a single organization and is also referred to as a single-tenant cloud. A community cloud model is one where the infrastructure is shared by several organizations, usually with the same policy and compliance considerations. For example, multiple different state-level organizations may get together and take advantage of a community cloud for the services they require.

Incorrect Answers:

Public clouds are also known as single-tenant clouds, and the combination of a public cloud provider with a private cloud platform is called a community cloud are incorrect.

Public clouds are not known as “single tenant” (that’s a designator for private cloud). The combination of two cloud deployment models is known as a hybrid cloud.