Certified Ethical Hacker Ethical Hacker Methodology 3 — Questions and Answers
Question 1: Which type of penetration test gives the tester full knowledge of the network, including architecture diagrams and source code?
- Black-box testing
- White-box testing (Correct answer)
- Gray-box testing
- Blind testing
Correct answer: White-box testing
White-box testing provides the tester with complete internal knowledge of the target.
Question 2: In a black-box engagement, what does the tester start with?
- Full source code access
- Administrative credentials
- Little to no prior knowledge of the target (Correct answer)
- Complete network diagrams
Correct answer: Little to no prior knowledge of the target
Black-box testing simulates an outside attacker with no prior internal knowledge.
Question 3: What is the correct ordered sequence of the CEH hacking phases?
- Scanning, Recon, Access, Maintaining, Covering tracks
- Recon, Scanning, Gaining access, Maintaining access, Covering tracks (Correct answer)
- Recon, Access, Scanning, Covering tracks, Maintaining
- Scanning, Access, Recon, Maintaining, Covering tracks
Correct answer: Recon, Scanning, Gaining access, Maintaining access, Covering tracks
The standard sequence is reconnaissance, scanning, gaining access, maintaining access, then covering tracks.
Question 4: A tester uses Google search operators like 'site:' and 'filetype:' to find exposed documents. This technique is called what?
- Banner grabbing
- Google dorking (Correct answer)
- Fuzzing
- Pivoting
Correct answer: Google dorking
Using advanced search operators to find sensitive exposed data is known as Google dorking.
Question 5: Which methodology framework is a widely used standard for structuring penetration tests?
- PTES (Penetration Testing Execution Standard) (Correct answer)
- ITIL
- COBIT
- Six Sigma
Correct answer: PTES (Penetration Testing Execution Standard)
PTES defines a standard structure for conducting penetration tests across phases.
Question 6: After compromising one host, a tester uses it to attack deeper internal systems. What is this called?
- Enumeration
- Pivoting (Correct answer)
- Footprinting
- Sniffing
Correct answer: Pivoting
Pivoting uses a compromised host as a stepping stone to reach other internal systems.
Question 7: What distinguishes a vulnerability assessment from a penetration test?
- Vulnerability assessment exploits findings; pentest only lists them
- Vulnerability assessment identifies weaknesses; pentest actively exploits them (Correct answer)
- They are identical processes
- Penetration tests never require authorization
Correct answer: Vulnerability assessment identifies weaknesses; pentest actively exploits them
A vulnerability assessment identifies and lists weaknesses, while a penetration test attempts to exploit them.
Certified Ethical Hacker Ethical Hacker Methodology 3
Which type of penetration test gives the tester full knowledge of the network, including architecture diagrams and source code?