Comprehensive and Detailed Explanation:
A Denial-of-Service (DoS) attack aims to overwhelm a system or service with excessive requests, rendering it unavailable to legitimate users. It targets:
* Bandwidth (e.g., flooding with traffic)
* Resources (CPU, memory, or disk usage)
* Applications (exploiting bugs that crash services)
From CEH v13 Courseware:
* Module 9: Denial-of-Service Attacks
Incorrect Options:
* B refers to brute-force attacks.
* C mischaracterizes password cracking.
* D describes impersonation or spoofing, not DoS.
Reference:CEH v13 Study Guide - Module 9: Types of DoS AttacksNIST SP 800-61r2 - Incident Handling Guide

STARTTLS is an SMTP command that allows the client to upgrade an existing insecure connection to a secure, encrypted TLS connection. It is widely supported by SMTP servers and used to protect email transmissions from interception.
Reference - CEH v13 Official Study Guide:
Module 20: Cryptography
Section: Secure Email Communication
Quote:
"STARTTLS is an SMTP command used to initiate encryption on an existing plaintext connection using TLS." Incorrect Options:
A). Opportunistic TLS is a concept, not a command
B & C. UPGRADETLS and FORCETLS are not valid SMTP commands

This is a classic phishing scam - a form of social engineering used to trick victims into giving up sensitive information.
Statement D is incorrect because:
* Antivirus, anti-spyware, and firewalls are primarily designed to stop malware and network intrusions.
* They cannot reliably detect social engineering attacks like phishing emails, especially if the email content appears legitimate.
* Detection of phishing is more reliant on user awareness and email filtering policies.
From CEH v13 Courseware:
* Module 7: Social Engineering
* Module 5: Email Security
CEH v13 Study Guide states:
"Phishing attacks are psychological rather than purely technical. Antivirus tools cannot detect or prevent all phishing attempts because these are based on user manipulation rather than system compromise." Reference:CEH v13 Study Guide - Module 7: Phishing and Social Engineering TacticsFTC.gov - Phishing Scams Prevention Guide

The main purpose of a rootkit is to hide malicious activity by modifying or replacing legitimate system binaries (e.g., ls, ps, netstat) so they no longer show the presence of malicious files, users, or processes. This enables attackers to maintain persistent and stealthy access.
From CEH v13 Official Courseware:
* Module 6: Malware Threats # Rootkits
CEH v13 Study Guide states:
"Rootkits are stealthy programs designed to conceal the existence of other malicious processes or programs by replacing legitimate operating system utilities and binaries. This makes detection and removal extremely difficult." Incorrect Options:
* A: This is a backdoor's behavior.
* B: A buffer overflow is a method of exploitation, not the rootkit's purpose.
* D: Refers to a backdoor or vulnerability, not a rootkit's core function.
Reference:CEH v13 Study Guide - Module 6: Rootkits and Malware TypesNIST SP 800-83 - Malware Incident Prevention and Handling

In CEH v13 Module 05: System Hacking, and in lab-based exploitation exercises, this is a classic fuzzer for buffer overflow testing.
The script creates increasingly larger strings of "A" (50, 100, 150...).
These are passed as arguments to different vulnerable commands on the target service (127.0.0.1:9999).
The goal is to trigger a crash, typically when input exceeds buffer limits (i.e., buffer overflow).
This is part of exploit development to identify the offset and locate the instruction pointer overwrite (EIP overwrite).
Reference:
CEH v13 Module 05 - Buffer Overflow Concepts
CEH iLabs: Exploitation with Custom Fuzzers in Python
EC-Council Exploit Development Lab Manual