Certified Ethical Hacker System Hacking and Malware 2

Question 1

An attacker uses the SAM file extracted from a Windows host to recover plaintext passwords offline. Which tool is BEST suited for this cracking task?

Accepted Answer

John the Ripper

Answer

Wireshark

Answer

Nikto

Answer

Netcat

Question 2

Which Windows technique allows an attacker to authenticate using a captured NTLM hash without ever cracking it to plaintext?

Accepted Answer

Pass-the-Hash

Answer

Rainbow table lookup

Answer

Dictionary attack

Answer

Brute force

Question 3

A rootkit that operates by modifying the kernel's system call table is classified as which type?

Accepted Answer

Kernel-level rootkit

Answer

Application-level rootkit

Answer

Library-level rootkit

Answer

Boot-sector rootkit

Question 4

During privilege escalation on Linux, an attacker finds a SUID binary owned by root. What does exploiting it most directly grant?

Accepted Answer

Execution with the file owner's (root) privileges

Answer

Network sniffing ability

Answer

A reverse DNS record

Answer

Persistent cron access only

Question 5

Which technique hides data by embedding it inside the unused slack space or within an image file's least significant bits?

Accepted Answer

Steganography

Answer

Tunneling

Answer

Spoofing

Answer

Fuzzing

Question 6

An attacker clears the Windows Security event log to cover their tracks. Which command-line tool can wipe a specific event log?

Accepted Answer

wevtutil

Answer

ipconfig

Answer

tasklist

Answer

chkdsk

Question 7

Which malware type replicates itself across networks without requiring user interaction or a host file?

Accepted Answer

Worm

Answer

Virus

Answer

Logic bomb

Answer

Trojan