Certified Ethical Hacker Ethical Hacker Security 3 — Questions and Answers
Question 1: Which attack intercepts communication between two parties without their knowledge?
- Phishing
- Man-in-the-middle (Correct answer)
- Brute force
- SQL injection
Correct answer: Man-in-the-middle
A man-in-the-middle attack secretly relays and possibly alters traffic between two endpoints.
Question 2: What technique poisons a switch's CAM table to capture traffic on a LAN?
- ARP spoofing
- MAC flooding (Correct answer)
- DNS poisoning
- Session fixation
Correct answer: MAC flooding
MAC flooding overflows the CAM table, forcing the switch to broadcast frames like a hub.
Question 3: Which encryption protocol is considered insecure for Wi-Fi and easily cracked?
- WPA3
- WPA2
- WEP (Correct answer)
- AES-CCMP
Correct answer: WEP
WEP uses weak RC4 keying and is trivially cracked, making it obsolete.
Question 4: A user receives a fraudulent email impersonating their bank to steal credentials. This is an example of:
- Smishing
- Phishing (Correct answer)
- Vishing
- Pharming
Correct answer: Phishing
Phishing uses deceptive emails to trick victims into revealing sensitive information.
Question 5: Which tool captures and analyzes network packets in real time?
- Nessus
- Wireshark (Correct answer)
- Hydra
- Nikto
Correct answer: Wireshark
Wireshark is a packet analyzer used to capture and inspect network traffic.
Question 6: What does DNS cache poisoning achieve for an attacker?
- Encrypts DNS traffic
- Redirects users to malicious sites (Correct answer)
- Blocks port scanning
- Disables firewalls
Correct answer: Redirects users to malicious sites
DNS poisoning inserts false records so victims are redirected to attacker-controlled servers.
Question 7: Which attack targets the human element rather than technical vulnerabilities?
- Buffer overflow
- Social engineering (Correct answer)
- Cross-site scripting
- Privilege escalation
Correct answer: Social engineering
Social engineering manipulates people into divulging information or performing actions.
Certified Ethical Hacker Ethical Hacker Security 3
Which attack intercepts communication between two parties without their knowledge?