Discuss GAQM CPEH-001 Exam Topic 5 Question 12

John has a proxy server on his network which caches and filters web access. He shuts down all unnecessary ports and services. Additionally, he has installed a firewall (Cisco PIX) that will not allow users to connect to any outbound ports. Jack, a network user has successfully connected to a remote server on port 80 using netcat. He could in turn drop a shell from the remote machine. Assuming an attacker wants to penetrate John's network, which of the following options is he likely to choose?

AUse ClosedVPN

BUse Monkey shell

CUse reverse shell using FTP protocol

DUse HTTPTunnel or Stunnel on port 80 and 443

Suggested Answer: D

As long as you allow http or https traffic attacks can be tunneled over those protocols with Stunnel or HTTPTunnel.

Get Premium CPEH-001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Chaya 12 months ago

ClosedVPN? That sounds too complicated for an attacker.

Gail 12 months ago

Wait, how did Jack even connect with those restrictions?

Gussie 1 year ago

I don't think FTP would work well in this case.

Merissa 1 year ago

D seems like the best option here.

Sheldon 1 year ago

Port 80 is usually open for HTTP traffic.

Latanya 1 year ago

I practiced a similar question where tunneling was the answer, so I’m leaning towards HTTPTunnel or Stunnel as the most likely choice for an attacker in this scenario.

Diane 1 year ago

I think ClosedVPN could be a possibility, but I don't recall if it would work with the restrictions John has in place.

Long 1 year ago

I'm not entirely sure, but I feel like a reverse shell using FTP might not be the best option here, especially since FTP usually requires specific ports to be open.

Kasandra 1 year ago

I remember studying about tunneling techniques, and I think using HTTPTunnel or Stunnel could be a way to bypass the firewall since they work over port 80 and 443.

Kina 1 year ago

I'm a little confused by this question. Updating the risk register doesn't seem directly relevant to the communication problem. I'm leaning towards either reviewing the stakeholder list or the engagement plan, but I'm not 100% sure.

Arlie 1 year ago

I'm a bit unsure about this one. There are a few different authentication methods listed, and I'll need to make sure I understand the differences between them to choose the right solution.

Shaniqua 1 year ago

I think option A is incorrect because we usually don't use asterisks with DELETE statements.

GAQM CPEH-001 Exam - Topic 5 Question 12 Discussion