Certified Ethical Hacker Exam Prep

by: Gregg, Michael

Certified Ethical Hacker Exam Prep

by: Gregg, Michael

ISBN 13:
9780789735317
ISBN 10:
0789735318
Edition: 1st
Format: Paperback
Copyright: 04/07/2006
Publisher: Pearson IT Certification
Newer Edition

Rent

Sorry, this item is currently unavailable.

Note: Supplemental materials are not guaranteed with Rental or Used book purchases.

Extend or Purchase Your Rental at Any Time

Need to keep your rental past your due date? At any time before your due date you can extend or purchase your rental through your account.

Summary

The CEH Exam Prep brings a proven learning method of study to this popular senior-level security certification.

Introduction

(1)

How This Book Helps You

(3)

Hardware and Software Requirements

(1)

Advice on Taking the Exam

(2)

Study and Exam Prep Tips

(508)

Learning Styles

(1)

Study Tips

(2)

Study Strategies

(1)

Pretesting Yourself

(1)

Exam Prep Tips

(4)

Exam Format

(1)

Question Types

(1)

More Exam-Preparation Tips

(2)

Final Considerations

(3)

Part I: Exam Preparation

The Business Aspects of Penetration Testing

(34)

Introduction

(1)

Security Fundamentals

(4)

Goals of Security

(1)

Assets, Threats, and Vulnerabilities

(2)

Defining an Exploit

(1)

Security Testing

(3)

No Knowledge Tests (Blackbox)

(1)

Full Knowledge Testing (Whitebox)

(1)

Partial Knowledge Testing (Graybox)

(1)

Types of Security Tests

(1)

Hacker and Cracker Descriptions

(3)

Who Attackers Are

(1)

Hacker and Cracker History

(1)

Ethical Hackers

(4)

Required Skills of an Ethical Hacker

(1)

Modes of Ethical Hacking

(1)

Rules of Engagement

(1)

Test Plans---Keeping It Legal

(5)

Test Phases

(1)

Establishing Goals

(1)

Getting Approval

(1)

Ethical Hacking Report

(1)

Ethics and Legality

(4)

Overview of U.S. Federal Laws

(3)

Summary

(1)

Key Terms

(1)

Apply Your Knowledge

(7)

Exercises

(1)

Exam Questions

(3)

Answers to Exam Questions

(2)

Suggested Reading and Resources

(2)

The Technical Foundations of Hacking

(38)

Introduction

(1)

The Attacker's Process

(4)

Performing Reconnaissance

(1)

Scanning and Enumeration

(1)

Gaining Access

(1)

Escalation of Privilege

(1)

Maintaining Access

(1)

Covering Tracks and Placing Backdoors

(1)

The Ethical Hacker's Process

(2)

National Institute of Standards and Technology (NIST)

(1)

Threat and Risk Assessment Working Guide (TRAWG)

(1)

Operational Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE)

(1)

Open Source Security Testing Methodology Manual (OSSTMM)

(1)

Security and the Stack

(17)

The OSI Model

(3)

Anatomy of TCP/IP Protocols

(14)

Summary

(1)

Key Terms

(1)

Apply Your Knowledge

(12)

Exercises

(3)

Exam Questions

(4)

Answers to Exam Questions

(2)

Suggested Reading and Resources

(2)

Footprinting and Scanning

(50)

Introduction

(1)

Determining Assessment Scope

(1)

The Seven-Step Information Gathering Process

(38)

Information Gathering

(14)

Determining the Network Range

107

(4)

Identifying Active Machines

111

(2)

Finding Open Ports and Access Points

113

(9)

OS Fingerprinting

122

(4)

Fingerprinting Services

126

(1)

Mapping the Network

127

(3)

Summary

130

(1)

Key Terms

130

(1)

Apply Your Knowledge

131

(8)

Exercises

131

(2)

Exam Questions

133

(3)

Answers to Exam Questions

136

(2)

Suggested Reading and Resources

138

(1)

Enumeration and System Hacking

139

(36)

Introduction

142

(1)

The Architecture of Windows Computers

142

(3)

Windows Security

144

(1)

Enumeration

145

(8)

Exploiting IPC$

147

(5)

Simple Network Management Protocol (SNMP) Enumeration

152

(1)

Windows Hacking

153

(14)

Password Guessing

154

(2)

Obtaining Password Hashes

156

(1)

Privilege Escalation and Exploiting Vulnerabilities

157

(1)

Owning the Box

158

(9)

Summary

167

(1)

Key Terms

167

(1)

Apply Your Knowledge

167

(8)

Exercises

167

(1)

Exam Prep Questions

168

(4)

Answers to Exam Questions

172

(1)

Suggested Reading and Resources

173

(2)

Linux and Automated Security Assessment Tools

175

(40)

Introduction

178

(1)

Linux

178

(19)

Linux File Structure

179

(2)

Linux Basics

181

(7)

Hacking Linux

188

(7)

Hardening Linux

195

(2)

Automated Assessment Tools

197

(8)

Automated Assessment Tool Categories

197

(5)

Automated Exploit and Assessment Tools

202

(3)

Picking the Right Platform

205

(1)

Summary

206

(1)

Key Terms

206

(1)

Apply Your Knowledge

207

(8)

Exercises

207

(2)

Exam Prep Questions

209

(3)

Answers to Exam Questions

212

(1)

Suggested Reading and Resources

213

(2)

Trojans and Backdoors

215

(40)

Introduction

218

(1)

An Overview of Trojans---The History of Trojans

218

(13)

Trojan Types

219

(1)

Trojan Ports and Communication Methods

220

(1)

Trojan Goals

221

(1)

Trojan Infection Mechanisms

222

(1)

Effects of Trojans

223

(1)

Trojan Tools

223

(6)

Distributing Trojans

229

(2)

Trojan Tool Kits

231

(1)

Covert Communications

231

(11)

Covert Communication Tools

235

(4)

Keystroke Logging

239

(2)

Spyware

241

(1)

Trojan and Backdoor Countermeasures

242

(2)

Summary

244

(1)

Key Terms

244

(1)

Apply Your Knowledge

245

(10)

Exercises

245

(2)

Exam Questions

247

(4)

Answers to Exam Questions

251

(2)

Suggested Reading and Resources

253

(2)

Sniffers, Session Hijacking, and Denial of Service

255

(38)

Introduction

258

(1)

Sniffers

258

(8)

Active Sniffing

259

(4)

Tools for Sniffing

263

(3)

Countermeasures

266

(1)

Session Hijacking

266

(5)

Identify an Active Session

267

(1)

Predict the Sequence Number

268

(1)

Take One of the Parties Offline

269

(1)

Take Control of the Session

269

(1)

Session Hijacking Tools

269

(2)

Preventing Session Hijacking

271

(1)

Denial of Service

271

(13)

Types of DoS

272

(4)

Distributed Denial of Service (DDoS)

276

(4)

DoS Countermeasures

280

(4)

Summary

284

(1)

Key Terms

284

(1)

Apply Your Knowledge

285

(8)

Exercises

285

(1)

Exam Questions

286

(3)

Answers to Exam Questions

289

(1)

Suggested Reading and Resources

290

(3)

Web Server Hacking, Web Applications, and Database Attacks

293

(38)

Introduction

296

(1)

Web Server Hacking

296

(13)

Scanning Web Servers

298

(1)

Banner Grabbing and Enumeration

298

(4)

Web Server Vulnerability Identification

302

(1)

Attacks Against Web Servers

302

(7)

Web Application Hacking

309

(9)

Hidden Fields

309

(1)

Web-Based Authentication

310

(2)

Web-Based Password Cracking

312

(2)

Cross-Site Scripting

314

(1)

Intercepting Web Traffic

315

(3)

Database Overview

318

(4)

Identifying SQL Servers

319

(1)

SQL Injection Vulnerabilities

320

(1)

SQL Injection Hacking Tools

320

(2)

Summary

322

(1)

Key Terms

322

(1)

Apply Your Knowledge

322

(9)

Exercises

323

(1)

Exam Prep Questions

323

(4)

Answers to Exam Questions

327

(2)

Suggested Reading and Resources

329

(2)

Wireless Technologies, Security, and Attacks

331

(34)

Introduction

334

(1)

Wireless Technologies---A Brief History

334

(5)

Cordless Phones

335

(1)

Satellite TV

335

(1)

Cell Phones

336

(1)

Bluetooth

337

(2)

Wireless LANs

339

(9)

Wireless LAN Basics

339

(3)

Wireless LAN Security

342

(2)

Wireless LAN Threats

344

(4)

Wireless Hacking Tools

348

(4)

Securing Wireless Networks

352

(5)

Defense in Depth

352

(1)

Site Survey

353

(2)

Robust Wireless Authentication

355

(1)

Misuse Detection

356

(1)

Summary

357

(1)

Key Terms

357

(1)

Apply Your Knowledge

358

(7)

Exercises

358

(1)

Exam Prep Questions

359

(3)

Answers to Exam Questions

362

(2)

Suggested Reading and Resources

364

(1)

IDS, Firewalls, and Honeypots

365

(38)

Introduction

368

(1)

Intrusion Detection Systems

368

(9)

IDS Types and Components

368

(2)

Pattern Matching and Anomaly Detection

370

(5)

IDS Evasion

375

(1)

IDS Evasion Tools

376

(1)

Firewalls

377

(11)

Firewall Types

377

(11)

Honeypots

388

(4)

Types of Honeypots

389

(1)

Detecting Honeypots

390

(2)

Summary

392

(1)

Key Terms

392

(1)

Apply Your Knowledge

393

(10)

Exercises

393

(4)

Exam Prep Questions

397

(3)

Answers to Exam Questions

400

(2)

Suggested Reading and Resources

402

(1)

Buffer Overflows, Viruses, and Worms

403

(36)

Introduction

406

(1)

Buffer Overflows

406

(9)

What Is a Buffer Overflow?

406

(1)

Why Are Programs Vulnerable?

407

(2)

Understanding Buffer Overflow Attacks

409

(3)

Common Buffer Overflow Attacks

412

(1)

Preventing Buffer Overflows

413

(2)

Viruses and Worms

415

(15)

Types and Transmission Methods of Viruses

416

(2)

History of Viruses

418

(2)

Well-Known Viruses

420

(5)

Virus Tools

425

(2)

Preventing Viruses

427

(1)

Antivirus

428

(2)

Summary

430

(1)

Key Terms

430

(1)

Apply Your Knowledge

431

(8)

Exercises

431

(1)

Exam Prep Questions

432

(3)

Answers to Exam Questions

435

(2)

Suggested Reading and Resources

437

(2)

Cryptographic Attacks and Defenses

439

(42)

Introduction

442

(1)

Functions of Cryptography

442

(1)

History of Cryptography

443

(2)

Algorithms

445

(7)

Symmetric Encryption

446

(4)

Asymmetric Encryption (Public Key Encryption)

450

(1)

El Gamal

451

(1)

Hashing

452

(2)

Digital Signatures

454

(1)

Steganography

455

(4)

Steganography Operation

456

(1)

Steganographic Tools

457

(2)

Digital Watermark

459

(1)

Digital Certificates

459

(1)

Public Key Infrastructure

460

(3)

Trust Models

461

(2)

Protocols, Standards, and Applications

463

(3)

Encryption Cracking and Tools

466

(5)

Weak Encryption

467

(2)

Encryption Cracking Tools

469

(2)

Summary

471

(1)

Key Terms

471

(1)

Apply Your Knowledge

472

(9)

Exercises

472

(2)

Exam Prep Questions

474

(3)

Answers to Exam Questions

477

(2)

Suggested Reading and Resources

479

(2)

Physical Security and Social Engineering

481

(34)

Introduction

484

(1)

Physical Security

484

(13)

Threats to Physical Security

484

(3)

Equipment Controls

487

(3)

Area Controls

490

(1)

Facility Controls

491

(2)

Personal Safety Controls

493

(1)

Physical Access Controls

494

(2)

Defense in Depth

496

(1)

Social Engineering

497

(7)

Six Types of Social Engineering

497

(1)

Person-to-Person--Based Social Engineering

498

(1)

Computer-Based Social Engineering

498

(1)

Reverse Social Engineering

499

(1)

Policies and Procedures

499

(5)

Summary

504

(1)

Key Terms

504

(1)

Apply Your Knowledge

505

(10)

Exercises

505

(1)

Exam Questions

506

(4)

Answers to Exam Questions

510

(2)

Suggested Reading and Resources

512

(3)

Part II: Final Review

Fast Facts

515

(18)

Ethics and Legality

515

(2)

Hackers

516

(1)

Footprinting

517

(1)

Scanning

517

(2)

Enumeration

519

(1)

System Hacking

519

(1)

Trojans and Backdoors

520

(1)

Sniffers

521

(1)

Denial of Service

522

(1)

Social Engineering

523

(1)

Session Hijacking

524

(1)

Hacking Web Servers

524

(1)

Web Application Vulnerabilities

525

(1)

Web-Based Password Cracking Techniques

525

(1)

SQL Injection

526

(1)

Hacking Wireless Networks

526

(1)

Virus and Worms

527

(1)

Physical Security

528

(1)

Linux Hacking

529

(1)

Evading Firewalls, IDS, and Honeypots

530

(1)

Buffer Overflows

530

(1)

Cryptography

531

(1)

Penetration Testing

531

(2)

Practice Exam and Answers

533

(38)

Practice Exam Questions

534

(25)

Answers to Practice Exam Questions

559

(12)

Glossary

571

(22)

Part III: Appendixes

Appendix A: Using the ExamGear Special Edition Software

593

(32)

Exam Simulation

593

(1)

Question Quality

593

(1)

Interface Design

593

(1)

Study Tools

594

(1)

Effective Learning Environment

594

(1)

Automatic Progress Tracking

594

(1)

How ExamGear Special Edition Works

595

(1)

Interface

595

(1)

Database

595

(1)

Installing ExamGear Special Edition

596

(1)

Requirements

596

(1)

Installing ExamGear Special Edition

596

(1)

Removing ExamGear Special Edition from Your Computer

597

(1)

Using ExamGear Special Edition

597

(22)

General Description of How the Software Works

597

(1)

Menu Options

598

(1)

Starting a Study Mode Session

599

(2)

Starting Practice Exams and Adaptive Exams

601

(1)

What Is an Adaptive Exam?

602

(1)

Why Do Vendors Use Adaptive Exams?

602

(1)

Studying for Adaptive Exams

602

(1)

ExamGear's Adaptive Exam

603

(1)

Question Types and How to Answer Them

603

(6)

Simulations

609

(1)

Hot Spot Questions

610

(2)

Mark Question and Time Remaining

612

(1)

Item Review

613

(4)

Examination Score Report Screen

617

(2)

Contacting Que Certification

619

(1)

Technical Support

619

(1)

Customer Service

619

(1)

Product Suggestions and Comments

619

(1)

License Agreement

620

(1)

License

620

(1)

Software and Documentation

620

(1)

License Term and Charges

620

(1)

Title

620

(1)

Updates

621

(1)

Limited Warranty and Disclaimer

621

(1)

Limitation of Liability

622

(1)

Miscellaneous

622

(1)

U.S. Government Restricted Rights

623

(2)

Appendix B: Preparing Your System for Knoppix-std

625

(2)

Index

627

Certified Ethical Hacker Exam Prep

Certified Ethical Hacker Exam Prep

9780789735317

0789735318

Summary

Author Biography

Table of Contents

Supplemental Materials

Write a Review

Certified Ethical Hacker Exam Prep

Certified Ethical Hacker Exam Prep

9780789735317

0789735318

Summary

Author Biography

Table of Contents

Supplemental Materials

Write a Review

Related Products