CEH: Certified Ethical Hacker Study Guide

CEH (312-50) Objectives

CEH™

Certified Ethical Hacker

Study Guide

CEH™

Certified Ethical Hacker

Study Guide

Kimberly Graves

Disclaimer: This eBook does not include ancillary media that was packaged with the printed version of the book.

Acquisitions Editor: Jeff Kellum Development Editor: Pete Gaughan

Technical Editors: Keith Parsons, Chris Carson Production Editor: Angela Smith

Copy Editor: Liz Welch

Editorial Manager: Pete Gaughan Production Manager: Tim Tate

Vice President and Executive Group Publisher: Richard Swadley Vice President and Publisher: Neil Edde

Media Project Manager 1: Laura Moss-Hollister Media Associate Producer: Josh Frank

Media Quality Assurance: Shawn Patrick

Book Designers: Judy Fung and Bill Gibson

Compositor: Craig Johnson, Happenstance Type-O-Rama Proofreader: Publication Services, Inc.

Indexer: Ted Laux

Project Coordinator, Cover: Lynsey Stanford Cover Designer: Ryan Sneed

Copyright © 2010 by Wiley Publishing, Inc., Indianapolis, Indiana Published simultaneously in Canada

ISBN: 978-0-470-52520-3

No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030, (201) 748-6011, fax (201) 748-6008, or online at http://www.wiley.com/go/permissions.

Limit of Liability/Disclaimer of Warranty: The publisher and the author make no representations or warranties with respect to the accuracy or completeness of the contents of this work and specifically disclaim all warranties, including without limitation warranties of fitness for a particular purpose. No warranty may be created or extended by sales or promotional materials. The advice and strategies contained herein may not be suitable for every situation. This work is sold with the understanding that the publisher is not engaged in rendering legal, accounting, or other professional services. If professional assistance is required, the services of a competent professional person should be sought. Neither the publisher nor the author shall be liable for damages arising herefrom. The fact that an organization or Web site is referred to in this work as a citation and/or a potential source of further information does not mean that the author or the publisher endorses the information the organization or Web site may provide or recommendations it may make. Further, readers should be aware that Internet Web sites listed in this work may have changed or disappeared between when this work was written and when it is read.

For general information on our other products and services or to obtain technical support, please contact our Customer Care Department within the U.S. at (877) 762-2974, outside the U.S. at (317) 572-3993 or fax (317) 572-4002.

Wiley also publishes its books in a variety of electronic formats. Some content that appears in print may not be available in electronic books.

Library of Congress Cataloging-in-Publication Data

Graves, Kimberly, 1974-

CEH : certified ethical hacker study guide / Kimberly Graves. — 1st ed. p. cm.

Includes bibliographical references and index.

ISBN 978-0-470-52520-3 (paper/cd-rom : alk. paper)

1. Electronic data processing personnel—Certification. 2. Computer security—Examinations—Study guides.

3. Computer hackers—Examinations—Study guides. 4. Computer networks—Examinations—Study guides. I. Title. QA76.3.G6875 2010

005.8—dc22

2010003135

TRADEMARKS: Wiley, the Wiley logo, and the Sybex logo are trademarks or registered trademarks of John Wiley & Sons, Inc. and/or its affiliates, in the United States and other countries, and may not be used without written permission. CEH Certified Ethical Hacker is a trademark of EC-Council. All other trademarks are the property of their respective owners. Wiley Publishing, Inc., is not associated with any product or vendor mentioned in this book.

10 9 8 7 6 5 4 3 2 1

Dear Reader,

Thank you for choosing CEH: Certified Ethical Hacker Study Guide. This book is part of a family of premium-quality Sybex books, all of which are written by outstanding authors who combine practical experience with a gift for teaching.

Sybex was founded in 1976. More than 30 years later, we’re still committed to producing consistently exceptional books. With each of our titles, we’re working hard to set a new standard for the industry. From the paper we print on, to the authors we work with, our goal is to bring you the best books available.

I hope you see all that reflected in these pages. I’d be very interested to hear your comments and get your feedback on how we’re doing. Feel free to let me know what you think about this or any other Sybex book by sending me an email at nedde@wiley.com. If you think you’ve found a technical error in this book, please visit http://sybex.custhelp.com. Customer feedback is critical to our efforts at Sybex.

Vice President and Publisher

Sybex, an Imprint of Wiley

To all my former and future students who have embarked on the path to greater knowledge. Remember the ethical hacker motto is to do no harm and leave no tracks.

Acknowledgments

To my family and friends, who have been so supportive through countless hours spent writing and editing this book. All your comments and critiques were invaluable and I appreciate your efforts. Most importantly, I want to thank my husband Ed for his support in this endeavor. It has been no small task and I appreciate his understanding every step of the way. I want to thank my technical editor, Keith Parsons, for his attention to detail and contin-

ual quest for excellence from himself and everyone he works with, this book being no exception. Thanks, Keith, I know it was a long road and you stuck with it until the very end.

Also thanks to the team at Sybex: Jeff Kellum, Pete Gaughan, and Angela Smith. Thank you for following through on this book and keeping me motivated.

About the Author

Graduating in 1995 from American University, with a major in political science and a minor in computer information technology, Kimberly Graves quickly learned that the technical side of her degree was going to be a far more interesting and challenging career path than something that kept her “inside the Beltway.”

Starting with a technical instructor position at a computer training company in Arlington, Virginia, Kimberly used the experience and credentials gained from that position to begin the steady accumulation of the other certifications that she now uses in her day-to-day interactions with clients and students. Since gaining her Certified Novell Engineer Certification (CNE) in a matter of a few months at her first job, Kimberly’s expertise in networking

and security has grown to encompass certifications by Microsoft, Intel, Aruba Networks, EC-Council, Cisco Systems, and CompTIA.

With over 15 cumulative years invested in the IT industry, Kimberly has amassed more than 25 instructor grade networking and security certifications. She has served various educational institutions in Washington, DC, as an adjunct professor while simultaneously serving as a subject matter expert for several security certification programs. Recently Kimberly

has been utilizing her Security+, Certified Wireless Network Associate (CWNA), Certified Wireless Security Professional (CWSP), Certified Ethical Hacker (CEH), and Certified Information Systems Security Professional (CISSP) certificates to teach and develop course material for the Department of Veterans Affairs, U.S. Air Force, and the NSA. Kimberly currently works with leading wireless vendors across the country to train the next generation of wireless security professionals. In 2007, Kimberly founded Techsource Network Solutions to better serve the needs of her clients and offer additional network and security consulting services.