Free GAQM CPEH-001 Exam Questions

Become GAQM Certified with updated CPEH-001 exam questions and correct answers

Page: 1 / 177

Total 881 Questions | Updated On: Jun 03, 2025

Add To Cart

Question 1

After studying the following log entries, what is the attacker ultimately trying to achieve as inferred from the log sequence?

1. mkdir -p /etc/X11/applnk/Internet/.etc

2. mkdir -p /etc/X11/applnk/Internet/.etcpasswd

3. touch -acmr /etc/passwd /etc/X11/applnk/Internet/.etcpasswd

4. touch -acmr /etc /etc/X11/applnk/Internet/.etc

5. passwd nobody -d

6. /usr/sbin/adduser dns -d/bin -u 0 -g 0 -s/bin/bash

7. passwd dns -d

8. touch -acmr /etc/X11/applnk/Internet/.etcpasswd /etc/passwd

9. touch -acmr /etc/X11/applnk/Internet/.etc /etc

A : ange password of user nobody

B : tract information from a local directory

C : ange the files Modification Access Creation times

D : wnload rootkits and passwords into a new directory

Answer: C

Question 2

Which of the following are valid types of rootkits? (Choose three.)

A : pervisor level

B : twork level

C : rnel level

D : plication level

E : ysical level

F : ta access level

Answer: A,C,D

Question 3

Which method can provide a better return on IT security investment and provide a thorough and comprehensive assessment of organizational security covering policy, procedure design, and implementation?

A : netration testing

B : cial engineering

C : lnerability scanning

D : cess control list reviews

Answer: A

Question 4

Least privilege is a security concept that requires that a user is

A : mited to those functions required to do the job.

B : ven root or administrative privileges.

C : usted to keep all data and access to that data under their sole control.

D : ven privileges equal to everyone else in the department.

Answer: A

Question 5

Shayla is an IT security consultant, specializing in social engineering and external penetration tests. Shayla has been hired on by Treks Avionics, a subcontractor for the Department of Defense. Shayla has been given authority to perform any and all tests necessary to audit the company's network security. No employees for the company, other than the IT director, know about Shayla's work she will be doing. Shayla's first step is to obtain a list of employees through company website contact pages. Then she befriends a female employee of the company through an online chat website. After meeting with the female employee numerous times, Shayla is able to gain her trust and they become friends. One day, Shayla steals the employee's access badge and uses it to gain unauthorized access to the Treks Avionics offices. What type of insider threat would Shayla be considered?

A : would be considered an Insider Affiliate

B : cause she does not have any legal access herself, Shayla would be considered an Outside Affiliate

C : ayla is an Insider Associate since she has befriended an actual employee

D : nce Shayla obtained access with a legitimate company badge; she would be considered a Pure Insider

Answer: A

Page: 1 / 177

Total 881 Questions | Updated On: Jun 03, 2025

Add To Cart