CEH Certified Ethical Hacker Practice Exams

  1.  You are examining connection logs from a client machine and come across this entry:

http://www.business123.com/../../../../../Windows/system.ini

Which attack does this most likely indicate?

A.  Parameter manipulation

B.  XSS

C.  SQL injection

D.  Directory traversal

  2.  A hacker is looking at a publicly facing web front end. One of the pages provides an entry box with the heading “Forgot password? Enter your e-mail address.” In the entry, he types anything' OR '1'='1.

A message appears stating, “Your login information has been sent to [e-mail].”

Which of the following is true?

A.  The cross-site scripting ...