MENU
Joe the Hacker breaks into XYZ's Linux system and plants a wiretap program in order to sniff passwords and user accounts off the wire. The wiretap program is embedded as a Trojan horse in one of the network utilities. Joe is worried that network administrator might detect the wiretap program by querying the interfaces to see if they are running in promiscuous mode.
What can Joe do to hide the wiretap program from being detected by ifconfig command?
Suggested Answer: C
Get Premium CPEH-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The normal way to hide these rogue programs running on systems is the use crafted commands like ifconfig and ls.
13 comments · newest first
ME
Merlyn
12 months ago
B seems like a solid choice, stealth mode is key.
VE
Veronika
12 months ago
Surprised that people think you can’t disable detection at all!
HA
Harris
1 year ago
A sounds too risky, blocking output could raise suspicion.
JI
Jin
1 year ago
I think D is misleading, there are ways to hide it.
RA
Raymon
1 year ago
C is the best option, definitely a classic rootkit move.
JU
Julene
1 year ago
I feel like I've read that you can't completely disable Promiscuous mode detection on Linux. That makes this question tricky!
KA
Karma
1 year ago
I practiced a question like this where stealth mode was mentioned. I wonder if that's what Joe should consider doing.
BO
Boris
1 year ago
I'm not entirely sure, but I think blocking output to the console could be a temporary fix. It seems risky though.
EL
Elenora
1 year ago
I remember something about rootkits being able to replace system utilities. That might be a way to hide the wiretap from ifconfig.
IL
Iluminada
1 year ago
This seems like a straightforward question about email marketing terminology. I'm pretty confident I know the answer, but I'll double-check my notes just to be sure.
CE
Ceola
1 year ago
Hmm, I'm a bit confused here. I'm not sure if the kubectl logs command would work for all the clusters, or if I need to do something else to get the logs from multiple clusters. Maybe B or D would be a better option?
HA
Harrison
1 year ago
I'm a bit unsure about this one. All of these project management concepts seem related to schedule development, so it's hard for me to quickly identify which one is the odd one out. I'll have to carefully consider the definitions of each input to make the right call.
LE
Leonida
1 year ago
This is a tricky one. I'm leaning towards C, since employees would need to follow the local privacy regulations where they're working. But the BCRs are the main thing, so I'm a bit conflicted. Guess I'll have to make an educated guess on this one.