GAQM CPEH-001 Exam - Topic 2 Question 102 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 102
Topic #: 2

SNMP is a protocol used to query hosts, servers, and devices about performance or health status data. This protocol has long been used by hackers to gather great amount of information about remote hosts. Which of the following features makes this possible? (Choose two)

AIt used TCP as the underlying protocol.

BIt uses community string that is transmitted in clear text.

CIt is susceptible to sniffing.

DIt is used by all network devices on the market.

Show Suggested Answer

Suggested Answer: A

Canaries or canary words are known values that are placed between a buffer and control data on the stack to monitor buffer overflows. When the buffer overflows, it will clobber the canary, making the overflow evident. This is a reference to the historic practice of using canaries in coal mines, since they would be affected by toxic gases earlier than the miners, thus providing a biological warning system.

by Thurman at Oct 23, 2024, 01:46 PM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tonja

3 months ago

I thought TCP was more secure, but I guess not here.

upvoted 0 times

...

Jin

3 months ago

Sniffing is definitely a concern with SNMP.

upvoted 0 times

...

Annelle

3 months ago

Wait, are all network devices really using SNMP?

upvoted 0 times

...

Kanisha

4 months ago

Totally agree, it's a major vulnerability!

upvoted 0 times

...

Lorenza

4 months ago

Community string in clear text is a big issue.

upvoted 0 times

...

Patti

4 months ago

I vaguely recall a practice question about SNMP vulnerabilities, but I can't remember if TCP was mentioned as a factor.

upvoted 0 times

...

Howard

4 months ago

I feel like option C might be right too, since sniffing is a common attack method for gathering SNMP data.

upvoted 0 times

...

William

4 months ago

I think option B is definitely one of the answers since the community string can be easily intercepted.

upvoted 0 times

...

Emiko

5 months ago

I remember studying SNMP and how it can be vulnerable, but I'm not sure if the community string being in clear text is one of the main issues.

upvoted 0 times

...

Aron

5 months ago

This is a good question. The key is understanding that SNMP was designed for ease of use, not security. The clear text community string and susceptibility to sniffing are the two main things that make it a target for hackers. I'll make sure to select those options.

upvoted 0 times

...

Kanisha

5 months ago

I'm a little confused by this question. I know SNMP is used for network management, but I'm not sure about the specific security vulnerabilities. I'll have to review my notes on SNMP before answering this one.

upvoted 0 times

...

Twana

5 months ago

Okay, I think I've got this. The community string being transmitted in clear text and the susceptibility to sniffing are the two key things that allow hackers to gather information using SNMP. I'll mark those two options.

upvoted 0 times

...

Tijuana

5 months ago

Hmm, I'm a bit unsure about this one. I know SNMP is used for monitoring, but I'm not sure exactly which features make it insecure. I'll have to think this through carefully.

upvoted 0 times

...

Sarina

5 months ago

This question seems pretty straightforward. I'm pretty confident I can identify the two features that make SNMP vulnerable to hackers.

upvoted 0 times

...

Sabra

10 months ago

I bet the SNMP developers were just thinking, 'What could possibly go wrong?' when they designed this protocol. Clearly, they underestimated the ingenuity of hackers. It's like putting a giant neon sign on your house that says 'Free stuff inside!'

upvoted 0 times

Matthew

8 months ago

Yeah, it's like they were asking for trouble with that design.

upvoted 0 times

...

Kimberlie

8 months ago

C) It is susceptible to sniffing.

upvoted 0 times

...

Kathrine

8 months ago

A) It uses community string that is transmitted in clear text.

upvoted 0 times

...

Wenona

10 months ago

B and C are the right choices. SNMP's use of clear text community strings and its susceptibility to sniffing are major security vulnerabilities that hackers can exploit to their advantage. It's like leaving your valuables in plain sight and then being surprised when they go missing.

upvoted 0 times

Tarra

8 months ago

D) It is used by all network devices on the market.

upvoted 0 times

...

Veda

8 months ago

C) It is susceptible to sniffing.

upvoted 0 times

...

Farrah

10 months ago

B) It uses community string that is transmitted in clear text.

upvoted 0 times

...

Roxane

10 months ago

A) It used TCP as the underlying protocol.

upvoted 0 times

...

Art

10 months ago

Ah, the joys of legacy protocols. SNMP is like a trusty old car - it gets the job done, but you better keep an eye on the oil and hope the engine doesn't explode. Kudos to the hackers who can make the most of this ancient technology.

upvoted 0 times

Selma

9 months ago

User 2

upvoted 0 times

...

Adelina

10 months ago

User 1

upvoted 0 times

...

Marvel

10 months ago

I can't believe they're still using SNMP with clear text community strings! That's like leaving your front door wide open and inviting the neighbors in for tea. Hackers must be having a field day with this protocol.

upvoted 0 times

...

Geoffrey

11 months ago

B and C are the correct answers. SNMP community strings are transmitted in clear text, making it easy for hackers to intercept and use that information to gain unauthorized access. And SNMP traffic is susceptible to sniffing, allowing hackers to gather a wealth of information about the target hosts.

upvoted 0 times