Discuss GAQM CPEH-001 Exam Topic 2 Question 102

SNMP is a protocol used to query hosts, servers, and devices about performance or health status data. This protocol has long been used by hackers to gather great amount of information about remote hosts. Which of the following features makes this possible? (Choose two)

AIt used TCP as the underlying protocol.

BIt uses community string that is transmitted in clear text.

CIt is susceptible to sniffing.

DIt is used by all network devices on the market.

Suggested Answer: A

Canaries or canary words are known values that are placed between a buffer and control data on the stack to monitor buffer overflows. When the buffer overflows, it will clobber the canary, making the overflow evident. This is a reference to the historic practice of using canaries in coal mines, since they would be affected by toxic gases earlier than the miners, thus providing a biological warning system.

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

35 comments · newest first

Tonja 11 months ago

I thought TCP was more secure, but I guess not here.

Jin 11 months ago

Sniffing is definitely a concern with SNMP.

Annelle 11 months ago

Wait, are all network devices really using SNMP?

Kanisha 12 months ago

Totally agree, it's a major vulnerability!

Lorenza 12 months ago

Community string in clear text is a big issue.

Patti 12 months ago

I vaguely recall a practice question about SNMP vulnerabilities, but I can't remember if TCP was mentioned as a factor.

Howard 1 year ago

I feel like option C might be right too, since sniffing is a common attack method for gathering SNMP data.

William 1 year ago

I think option B is definitely one of the answers since the community string can be easily intercepted.

Emiko 1 year ago

I remember studying SNMP and how it can be vulnerable, but I'm not sure if the community string being in clear text is one of the main issues.

Aron 1 year ago

This is a good question. The key is understanding that SNMP was designed for ease of use, not security. The clear text community string and susceptibility to sniffing are the two main things that make it a target for hackers. I'll make sure to select those options.

Kanisha 1 year ago

I'm a little confused by this question. I know SNMP is used for network management, but I'm not sure about the specific security vulnerabilities. I'll have to review my notes on SNMP before answering this one.

Twana 1 year ago

Okay, I think I've got this. The community string being transmitted in clear text and the susceptibility to sniffing are the two key things that allow hackers to gather information using SNMP. I'll mark those two options.

Tijuana 1 year ago

Hmm, I'm a bit unsure about this one. I know SNMP is used for monitoring, but I'm not sure exactly which features make it insecure. I'll have to think this through carefully.

Sarina 1 year ago

This question seems pretty straightforward. I'm pretty confident I can identify the two features that make SNMP vulnerable to hackers.

Sabra 1 year ago

I bet the SNMP developers were just thinking, 'What could possibly go wrong?' when they designed this protocol. Clearly, they underestimated the ingenuity of hackers. It's like putting a giant neon sign on your house that says 'Free stuff inside!'

Matthew 1 year ago

↳ replying to Sabra

Yeah, it's like they were asking for trouble with that design.

Kimberlie 1 year ago

↳ replying to Sabra

C) It is susceptible to sniffing.

Kathrine 1 year ago

↳ replying to Sabra

A) It uses community string that is transmitted in clear text.

Wenona 2 years ago

B and C are the right choices. SNMP's use of clear text community strings and its susceptibility to sniffing are major security vulnerabilities that hackers can exploit to their advantage. It's like leaving your valuables in plain sight and then being surprised when they go missing.

Tarra 1 year ago

↳ replying to Wenona

D) It is used by all network devices on the market.

Veda 1 year ago

↳ replying to Wenona

C) It is susceptible to sniffing.

Farrah 1 year ago

↳ replying to Wenona

B) It uses community string that is transmitted in clear text.

Roxane 1 year ago

↳ replying to Wenona

A) It used TCP as the underlying protocol.

Art 2 years ago

Ah, the joys of legacy protocols. SNMP is like a trusty old car - it gets the job done, but you better keep an eye on the oil and hope the engine doesn't explode. Kudos to the hackers who can make the most of this ancient technology.

Selma 1 year ago

↳ replying to Art

User 2

Adelina 1 year ago

↳ replying to Art

User 1

Marvel 2 years ago

I can't believe they're still using SNMP with clear text community strings! That's like leaving your front door wide open and inviting the neighbors in for tea. Hackers must be having a field day with this protocol.

Geoffrey 2 years ago

B and C are the correct answers. SNMP community strings are transmitted in clear text, making it easy for hackers to intercept and use that information to gain unauthorized access. And SNMP traffic is susceptible to sniffing, allowing hackers to gather a wealth of information about the target hosts.

Gilma 1 year ago

↳ replying to Geoffrey

D) It is used by all network devices on the market.

Val 1 year ago

↳ replying to Geoffrey

C) It is susceptible to sniffing.

Alpha 1 year ago

↳ replying to Geoffrey

B) It uses community string that is transmitted in clear text.

Tasia 1 year ago

↳ replying to Geoffrey

A) It used TCP as the underlying protocol.

Billy 2 years ago

I also think A) could be a factor. Using TCP as the underlying protocol might make it easier for hackers to intercept data.

Pansy 2 years ago

I agree with Kallie. The clear text transmission of community string and susceptibility to sniffing are major vulnerabilities.

Kallie 2 years ago

I think B) and C) make it possible for hackers to gather information.

GAQM CPEH-001 Exam - Topic 2 Question 102 Discussion