Ethical Hacking
Multiple Choice Questions

Hacking with permission to find vulnerabilities

Hacking for financial gain

Hacking for personal revenge

Hacking without permission

An ethical hacker who works with permission

A hacker who breaks the law

A hacker who steals data

A hacker who attacks governments

A hacker who breaks into systems illegally

An ethical hacker

A hacker who helps organizations

A penetration tester

A hacker who may break laws but not for malicious purposes

A hacker who is always ethical

A hacker who works for the government

A hacker who only attacks criminals

CEH (Certified Ethical Hacker)

CCNA

MCSE

OCP

VA identifies weaknesses; PT exploits them

PT identifies weaknesses; VA exploits them

Both are the same

VA is automated; PT is manual

Gathering information about a target system

Scanning for open ports

Exploiting vulnerabilities

Gaining access to a system

nslookup

Nmap

Metasploit

Wireshark

Searching public records

Port scanning

Network sniffing

Social engineering

To query domain registration information

To scan ports

To crack passwords

To encrypt data

tracert

nslookup

ping

netstat

To find sensitive information using advanced search operators

To hack Google

To scan for open ports

To perform DDoS attacks

Nmap

Metasploit

Burp Suite

John the Ripper

A TCP half-open scan

A UDP scan

A full TCP connect scan

An Xmas scan

To discover open ports on a target

To exploit vulnerabilities

To crack passwords

To perform social engineering

-sV

-sS

-sU

-sA

Retrieving service information from open ports

Grabbing a banner from a website

Stealing user credentials

Performing a DoS attack

snmpwalk

nmap

netcat

nslookup

Obtaining passwords through various techniques

Encrypting passwords

Changing passwords

Deleting passwords

Dictionary attack

Brute force attack

Rainbow table attack

Phishing

A precomputed table for reversing cryptographic hash functions

A table of passwords

A firewall rule set

A routing table

Gaining higher-level permissions on a system

Lowering user permissions

Encrypting files

Deleting system files

useradd

adduser

Both A and B

usermod

Malware that hides its presence and provides backdoor access

A type of antivirus

A firewall

A vulnerability scanner

Malware that replicates by attaching to files

Malware that self-propagates over networks

Malware that disguises as legitimate software

Malware that encrypts files

Malware that self-propagates without user interaction

Malware that attaches to files

Malware that encrypts files

Malware that steals passwords

Malware disguised as legitimate software

Malware that replicates like a virus

Malware that spreads via email

Malware that encrypts files

Malware that encrypts files and demands payment

Malware that steals credentials

Malware that spreads via USB drives

Malware that logs keystrokes

Malware that records keystrokes

Malware that encrypts files

Malware that steals passwords

Malware that spreads via email

Virus needs a host file; worm is standalone

Worm needs a host file; virus is standalone

Both are the same

Virus spreads over networks; worm does not

Flooding a system to make it unavailable

Gaining unauthorized access

Stealing sensitive data

Modifying data

Distributed Denial of Service using multiple machines

Direct Denial of Service

Dynamic Denial of Service

Data Denial of Service

Intercepting and possibly altering communication between two parties

Impersonating a server

Flooding a network

Cracking passwords

Sending fake ARP messages to associate an attacker's MAC address with a target's IP

Spoofing an IP address

Spoofing a DNS

Spoofing a MAC address

Stealing a valid session token to gain unauthorized access

Overloading a session

Encrypting session data

Logging out a user

Capturing and analyzing network traffic

Sending fake packets

Decrypting encrypted traffic

Flooding a network

A list of top web application security risks

A list of secure coding practices

A list of firewall rules

A list of encryption algorithms

Injecting SQL queries through input fields to manipulate the database

Injecting JavaScript into web pages

Injecting commands into the OS

Injecting HTML tags

Injecting malicious scripts into web pages

Injecting SQL queries

Injecting commands into the OS

Faking HTTP requests

Forcing a user to execute unwanted actions on a web application

Injecting scripts into web pages

Stealing cookies

SQL injection

Burp Suite

Nmap

Metasploit

Wireshark

To prevent injection attacks by sanitizing user input

To speed up the application

To improve UI

To handle errors

Encryption is reversible; hashing is irreversible

Hashing is reversible; encryption is irreversible

Both are reversible

Both are irreversible

Uses the same key for encryption and decryption

Uses different keys for encryption and decryption

Uses no key

Uses a public and private key

Uses a pair of keys (public and private)

Uses the same key

Uses no key

Uses a shared secret

A function that maps data of arbitrary size to a fixed-size value

A function that encrypts data

A function that decrypts data

A function that compresses data

To verify authenticity and integrity of a message

To encrypt messages

To compress messages

To hide messages

Secure communication over the internet

File transfer

Email encryption

Database encryption

Manipulating people into revealing confidential information

Hacking computer systems

Writing malware

Performing penetration testing

A fraudulent attempt to obtain sensitive information via email

A type of malware

A network attack

A physical security breach

Creating a fabricated scenario to obtain information

Sending fake emails

Making phone calls pretending to be someone else

Both A and C

Leaving infected USB drives to lure victims

Sending emails with malware

Creating fake websites

Calling victims

Following an authorized person into a restricted area

Sending fake emails

Calling to trick users

Hacking a network

Voice phishing via phone calls

Email phishing

SMS phishing

Malware phishing

Wired Equivalent Privacy - an older wireless encryption protocol

Wi-Fi Protected Access

A type of firewall

A routing protocol

Wi-Fi Protected Access

Wired Equivalent Privacy

Wireless Personal Area Network

Wide Area Network

An improved version of WPA using AES encryption

An older version of WEP

A wired security protocol

A type of malware

An unauthorized wireless access point

A secure access point

A public Wi-Fi hotspot

A VPN

Sending deauth frames to disconnect clients from a WLAN

Encrypting wireless traffic

Scanning for open ports

Performing a DOS attack

Aircrack-ng

Nmap

Metasploit

John the Ripper

A penetration testing framework

A network scanner

A password cracker

A vulnerability scanner

A network protocol analyzer

A port scanner

A password cracker

A web application scanner

A password cracking tool

A network scanner

A vulnerability scanner

A firewall

A vulnerability scanner

A penetration testing framework

A network sniffer

A password cracker

Web application security testing

Network scanning

Password cracking

Wireless cracking

An intrusion detection/prevention system

A network scanner

A password cracker

A firewall

Preparation

Detection and analysis

Containment

Eradication

To preserve, analyze, and present digital evidence

To hack systems

To install malware

To crack passwords

A device that prevents writing to a storage device during forensic analysis

A software that encrypts data

A firewall rule

A type of malware

The chronological documentation of evidence handling

A chain of command

A type of lock

A network topology

A breach is a specific type of incident involving data exposure

They are the same

Breach is an attempted attack; incident is successful

Incident is always malicious

Volatility

Wireshark

Nmap

Metasploit

Confidentiality, Integrity, Availability

Confidentiality, Identity, Access

Control, Integrity, Access

Confidentiality, Integrity, Authentication

dig axfr

nslookup -type=any

host -l

All of the above

A TCP scan with no flags set

A UDP scan

A SYN scan

A FIN scan

The Security Account Manager file storing password hashes

A system log file

A configuration file

A network file

A virus that changes its code to evade detection

A virus that encrypts files

A virus that steals passwords

A virus that self-propagates

A DDoS attack using ICMP echo requests with spoofed source

A SYN flood attack

A UDP flood attack

A DNS amplification attack

Injecting operating system commands through input fields

Injecting SQL commands

Injecting JavaScript

Injecting HTML

An entity that issues digital certificates

A hashing algorithm

A symmetric encryption algorithm

A type of firewall

A targeted phishing attack on a specific individual

A mass phishing email

A phishing attack via SMS

A phishing attack via phone

Setting up a rogue access point with the same SSID as a legitimate one

Cracking WEP keys

Deauthenticating clients

Sniffing wireless traffic

To send malformed input to find vulnerabilities

To scan ports

To crack passwords

To sniff traffic

An exact bit-by-bit copy of a storage device

A compressed backup

A screenshot

A log file

A systematic evaluation of security controls

A penetration test

A vulnerability scan

A social engineering test

To gather personal information about targets

To hack social media accounts

To spread malware

To perform phishing

A ping packet

A SYN packet

A FIN packet

A UDP packet

Local is from within the system; remote is from outside

Remote is from within; local is from outside

Both are the same

Local requires physical access

A virus that infects the master boot record

A virus that infects files

A virus that infects email

A virus that infects networks

Forcing a DNS server to return a false IP address

Flooding a DNS server

Hacking a DNS server

Encrypting DNS queries

Accessing files outside the web root directory

Injecting SQL commands

Injecting JavaScript

Injecting commands

Random data added to passwords before hashing

A type of encryption

A hash function

A type of key

Compromising a website frequented by the target

Phishing emails

USB baiting

Tailgating

Exploiting Wi-Fi Protected Setup to recover the PIN

Cracking WEP

Deauth attack

Evil twin

To lure attackers and study their behavior

To block attacks

To scan for vulnerabilities

To encrypt traffic

To verify the integrity of evidence

To encrypt evidence

To compress evidence

To hide evidence

A vulnerability unknown to the vendor

A vulnerability that has been patched

A vulnerability that is not exploitable

A vulnerability found in old software

To search for internet-connected devices and services

To scan for vulnerabilities

To crack passwords

To perform DDoS

A TCP scan with the ACK flag set to determine firewall rules

A SYN scan

A UDP scan

A FIN scan

A file storing user account information

A file storing passwords

A configuration file

A log file

Malware that triggers when specific conditions are met

Malware that replicates itself

Malware that encrypts files

Malware that steals credentials

A DoS attack using ICMP echo requests

A DDoS attack using SYN packets

A UDP flood

A DNS amplification

Improperly configured security settings leading to vulnerabilities

A firewall rule

An encryption key

A strong password

A number used once in cryptographic communication

A type of key

A hash function

A certificate

Spear phishing is targeted at specific individuals

Phishing is targeted; spear is broad

Both are the same

Spear phishing uses malware

To interfere with wireless signals

To crack passwords

To sniff traffic

To secure a network

An open-source vulnerability scanner

A penetration testing framework

A network sniffer

A password cracker

Containment stops the incident from spreading; eradication removes the cause

Eradication stops the spread; containment removes the cause

Both are the same

Containment is only for network incidents

A weakness that can be exploited

A threat actor

A security control

A patch

To gather information about websites and servers

To scan ports

To crack passwords

To perform DDoS

Vulnerability scan identifies potential weaknesses; penetration test exploits them

Penetration test identifies weaknesses; scan exploits them

Both are the same

Scan is manual; test is automated

A hidden method of accessing a system

A type of firewall

A vulnerability scanner

A password

Malware that secretly gathers user information

Malware that encrypts files

Malware that self-propagates

Malware that corrupts files

Replaying captured network traffic to gain unauthorized access

Flooding a network

Cracking passwords

Sniffing traffic

To filter and monitor HTTP traffic for attacks

To scan for vulnerabilities

To encrypt data

To manage certificates

Public key is shared; private key is kept secret

Private key is shared; public key is secret

Both are shared

Both are secret

Pretending to be someone else to gain information

Sending fake emails

Leaving infected USB drives

Following someone into a building

PSK uses a pre-shared key; Enterprise uses a RADIUS server

Enterprise uses a pre-shared key; PSK uses RADIUS

Both use the same

PSK is more secure

A password cracking tool for network services

A vulnerability scanner

A network sniffer

A web application scanner

To establish a timeline of events

To encrypt evidence

To compress evidence

To hide evidence

A vulnerability is a weakness; an exploit is a technique to use it

An exploit is a weakness; a vulnerability is a technique

Both are the same

Vulnerabilities are always patched

Copying DNS records from a DNS server

Transferring files

Transferring network packets

Transferring email

To detect the operating system

To scan for open ports

To perform a version scan

To perform a script scan

Local exploit requires prior access; remote exploit works over the network

Remote exploit requires prior access; local works over the network

Both are the same

Local exploits are more severe

Malware used to install other malware

Malware that encrypts files

Malware that steals credentials

Malware that self-propagates

An attack using overlapping IP fragments to crash a system

A SYN flood

A UDP flood

A DNS amplification

To prevent XSS and other injection attacks

To encrypt data

To compress data

To authenticate users

To bind a public key with an identity

To encrypt data

To hash data

To compress data

Phishing uses email; smishing uses SMS

Smishing uses email; phishing uses SMS

Both use email

Both use phone calls

To detect and prevent unauthorized wireless access

To crack wireless passwords

To sniff wireless traffic

To amplify wireless signals

To automate SQL injection detection and exploitation

To scan for open ports

To crack passwords

To sniff traffic