GAQM Exam CPEH-001 Topic 2 Question 102 Discussion

Actual exam question for GAQM's CPEH-001 exam

Question #: 102
Topic #: 2

SNMP is a protocol used to query hosts, servers, and devices about performance or health status data. This protocol has long been used by hackers to gather great amount of information about remote hosts. Which of the following features makes this possible? (Choose two)

AIt used TCP as the underlying protocol.

BIt uses community string that is transmitted in clear text.

CIt is susceptible to sniffing.

DIt is used by all network devices on the market.

Show Suggested Answer

Suggested Answer: A

Canaries or canary words are known values that are placed between a buffer and control data on the stack to monitor buffer overflows. When the buffer overflows, it will clobber the canary, making the overflow evident. This is a reference to the historic practice of using canaries in coal mines, since they would be affected by toxic gases earlier than the miners, thus providing a biological warning system.

by Thurman at Oct 23, 2024, 01:46 PM

Limited Time Offer

25%

Off

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Art

2 days ago

Ah, the joys of legacy protocols. SNMP is like a trusty old car - it gets the job done, but you better keep an eye on the oil and hope the engine doesn't explode. Kudos to the hackers who can make the most of this ancient technology.

upvoted 0 times

...

Marvel

3 days ago

I can't believe they're still using SNMP with clear text community strings! That's like leaving your front door wide open and inviting the neighbors in for tea. Hackers must be having a field day with this protocol.

upvoted 0 times

...

Geoffrey

9 days ago

B and C are the correct answers. SNMP community strings are transmitted in clear text, making it easy for hackers to intercept and use that information to gain unauthorized access. And SNMP traffic is susceptible to sniffing, allowing hackers to gather a wealth of information about the target hosts.

upvoted 0 times

...