Ethical Hacker Security 1

Question 1

What port number is used by LDAP protocol?

Accepted Answer

389

Answer

The Lightweight Directory Access Protocol (LDAP) uses TCP port 389 for unencrypted communication. LDAP is a widely used application protocol for accessing and maintaining distributed directory information services, such as user accounts and network resources. For secure, encrypted communication, a variant known as LDAPS (LDAP Secure) typically operates over TCP port 636, using SSL/TLS encryption.

Question 2

A penetration tester is hired to do a risk assessment of a company's DMZ.
The rules of engagement states that the penetration test be done from an external IP address with no prior knowledge of the internal IT systems.
What kind of test is being performed?

Accepted Answer

black box

Answer

A black box penetration test is conducted with no prior knowledge of the target system's internal structure, architecture, or source code. The tester simulates an external attacker who has no insider information, relying solely on publicly available information and reconnaissance to identify vulnerabilities. This approach provides a realistic assessment of what an external, unauthorized attacker could achieve against the organization's systems.

Question 3

How many bits encryption does SHA-1 use?

Accepted Answer

160 bits

Answer

SHA-1 (Secure Hash Algorithm 1) is a cryptographic hash function that produces a fixed-size output of 160 bits (20 bytes), known as a message digest. This hash value is unique for each input and is commonly used for data integrity verification and digital signatures. While historically popular, SHA-1 is now considered cryptographically weak for certain applications due to the discovery of practical collision attacks.

Question 4

What is the least important information when you analyze a public IP address in a security alert?

Accepted Answer

ARP

Answer

When analyzing a public IP address in a security alert, information like Whois (owner details), DNS (associated domain names), and Geolocation (physical location) are crucial for identifying the source and nature of a threat. ARP (Address Resolution Protocol), however, maps IP addresses to MAC addresses within a local network segment. It is largely irrelevant for analyzing a public IP address that is external to the local network, as it doesn't provide global routing or ownership information.

Question 5

A medium-sized healthcare IT business decides to implement a risk management strategy.
Which of the following is NOT one of the five basic responses to risk?

Accepted Answer

Delegate

Answer

The five basic responses to risk in risk management are typically: Avoid (eliminate the activity causing the risk), Mitigate (reduce the likelihood or impact of the risk), Accept (live with the risk), and Transfer (shift the risk to another party, often through insurance). 'Delegate' is not considered one of these fundamental risk responses. While tasks related to risk management can be delegated, the ultimate responsibility for the risk itself remains with the organization.

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Practice Test

Ethical Hacker Security 1