CEH Timed Practice Test 2 — 10 Questions

Question 1

Which TWO of the following are characteristics of a Bluetooth Low Energy (BLE) IoT device that make it suitable for a battery-powered sensor?

Accepted Answer

Low energy consumption.. Option C is correct because BLE is specifically designed for ultra-low power consumption, enabling battery-powered sensors to operate for months or years on a coin cell battery. BLE achieves this by using short bursts of data transmission and then entering a deep sleep mode, drastically reducing energy usage compared to classic Bluetooth or Wi-Fi.

Answer

High data throughput.

Answer

Long range (up to 1 km).

Answer

Operates in unlicensed spectrum like Wi-Fi.

Question 2

Refer to the exhibit. During a wireless audit, you capture a beacon frame from a corporate access point. What is the most significant security concern based on this information?

Accepted Answer

The group cipher is TKIP, which is deprecated and vulnerable.. Option D is correct because TKIP (Temporal Key Integrity Protocol) is a deprecated encryption protocol that was part of the original WPA standard. It is vulnerable to several attacks, including the Michael attack and the Beck-Tews attack, which can allow an attacker to decrypt traffic or inject packets. In a modern WPA2 network, TKIP should never be used as the group cipher; only CCMP (AES) is considered secure.

Answer

The pairwise cipher is CCMP, which is outdated.

Answer

The network uses WPA2-PSK, which is easily cracked.

Answer

The beacon frame reveals the BSSID, which is a security risk.

Question 3

Drag and drop the steps to perform a buffer overflow exploit in a controlled lab environment into the correct order.

Question 4

Drag and drop the steps to perform a SQL injection attack manually into the correct order.

Question 5

Drag and drop the steps to set up a reverse shell using Netcat into the correct order.

Question 6

Drag and drop the steps to configure a wireless network with WPA2-Enterprise authentication on a Cisco AP into the correct order.

Question 7

Drag and drop the steps to set up a VPN using IPsec in tunnel mode into the correct order.

Question 8

Drag and drop the steps to perform a successful social engineering attack in a penetration test into the correct order.

Question 9

Which TWO vulnerabilities are associated with buffer overflow attacks?

Accepted Answer

Arbitrary code execution. Buffer overflow attacks occur when a program writes more data to a buffer than it can hold, overwriting adjacent memory. This can corrupt the stack and allow an attacker to inject and execute arbitrary code (option A) by overwriting the return address or function pointers. Stack smashing (option B) is a specific technique that deliberately corrupts the call stack to hijack control flow, often as part of a buffer overflow exploit.

Answer

Authentication bypass via SQL injection

Answer

Cross-site scripting (XSS)

Answer

Race condition

Question 10

Refer to the exhibit. An attacker runs the nslookup command shown. What information has been gathered?

Accepted Answer

Mail server addresses and priority. The nslookup command with the -type=MX query returns mail exchange (MX) records for the domain. The output shows mail server hostnames and their associated priority values (e.g., 10, 20), which indicate the order in which mail servers should be used. This directly reveals the mail server addresses and their priority, making option A correct.

Answer

Name server records

Answer

IP addresses of the web server

Answer

SPF records for email authentication