312-50v10 Certified Ethical Hacker (CEH v10) Practice Questions

A demilitarized zone (DMZ) provides controlled access to public-facing services while protecting the internal network. It acts as a buffer zone where external users can access specific services (like web servers) without having direct access to internal network resources, effectively isolating and securing the internal network from external threats.

The recommended architecture is to place the web server in a DMZ facing the Internet, while keeping the application and database servers on the internal network. This three-tier architecture provides security by limiting external exposure while allowing the necessary communication between tiers through controlled firewall rules.

In Access Control Lists (ACLs), rules are processed in order from top to bottom. The first ACL rule is denying all TCP traffic, which means subsequent ACL rules permitting specific traffic will be ignored since the deny rule is matched first. ACL rules must be ordered properly with more specific rules before general deny rules.

Passive network sniffing can only monitor and capture existing network traffic without interfering with it. Modifying and replaying captured network traffic requires active techniques that involve injecting or altering packets on the network, which goes beyond the capabilities of passive sniffing methods.

Cross-site scripting (XSS) vulnerabilities are mitigated by disallowing users from entering HTML tags and script code in web forms. Input validation and output encoding prevent malicious scripts from being executed in users' browsers, which is the primary attack vector for XSS attacks.

Tailgating is the practice of following an authorized person through a secured entrance without proper authorization. This occurs when an unauthorized individual gains physical access by closely following an employee through security doors or checkpoints. Reverse Social Engineering involves manipulating someone to contact the attacker, Piggybacking typically involves the authorized person being aware and allowing access, and "Announced" is not a recognized security breach type. Tailgating is a common physical security threat that organizations must address through security awareness training and access controls.

Keeping offline backup generations is the most effective countermeasure against ransomware because the backups are not connected to the network and cannot be encrypted by ransomware. This allows organizations to restore data without paying the ransom, as the offline backups remain unaffected by the attack.

The double dash (--) at the end of the SQL query indicates an End of Line Comment attack. This technique comments out the rest of the original query, allowing the attacker to bypass authentication or other security checks by making the database ignore the remaining conditions in the WHERE clause.

Full disk encryption is the best protection for confidential documents on a laptop that might be stolen. It encrypts the entire hard drive, making all data unreadable without the encryption key, even if the physical device is compromised. BIOS passwords and hidden folders can be easily bypassed by attackers with physical access.

The hosts file contains hostname-to-IP address mappings that override DNS lookups. By modifying this file, an attacker can redirect traffic from legitimate sites like "www.MyPersonalBank.com" to malicious phishing sites by mapping the legitimate domain to a malicious IP address.