Free Certified Ethical Hacker MCQ Questions and Answers 1 — Questions and Answers
Question 1: Which of these is not an element of security?
- Availability
- Fraternity (Correct answer)
- Confidentiality
- Integrity
Correct answer: Fraternity
The fundamental elements of information security are typically referred to as the CIA triad: Confidentiality, Integrity, and Availability. These three principles guide the protection of information assets and are core to cybersecurity. 'Fraternity' is a social term and has no relevance to the core concepts of information security.
Question 2: Let's say you want to find information about a website by crawling through it. Which application do you apply?
- Web Ant
- Web Bug
- Web Spiders (Correct answer)
- Web Scorpion
Correct answer: Web Spiders
Web spiders (also known as web crawlers or bots) are automated programs that systematically browse the World Wide Web. They are used by search engines to index web content and by security professionals or attackers to gather information about a website's structure, links, and content through crawling. This reconnaissance helps in identifying potential targets or vulnerabilities.
Question 3: Except for one, all of the examples below are sniffing techniques.
- DHCP Starvation
- ARP Poisoning
- Spoofing
- DAC Flooding (Correct answer)
Correct answer: DAC Flooding
DHCP Starvation, ARP Poisoning, and Spoofing (specifically MAC or IP spoofing used in conjunction with other techniques) are all methods associated with network sniffing or manipulating network traffic to enable sniffing. DAC Flooding, however, refers to a denial-of-service attack targeting a switch's CAM table, which is distinct from techniques used for sniffing.
Question 4: When this flag is set, communication is abruptly ended.
- ACK
- RSTT
- SRT
- RST (Correct answer)
Correct answer: RST
The RST (Reset) flag in a TCP packet is used to immediately terminate a connection. It indicates that the sender has encountered an error or an invalid segment and wishes to abort the connection without going through the normal graceful shutdown process. This can be used in various network attacks or for legitimate error handling.
Question 5: In 2004, Johnny Long popularized a footprinting technique using the manipulation of a search string to identify vulnerabilities.
- Bing Hacking
- Facebook Hacking
- Yahoo Hacking
- Google Hacking (Correct answer)
Correct answer: Google Hacking
Google Hacking, also known as Google Dorking, was popularized by Johnny Long in 2004. It involves using advanced search operators in Google (and other search engines) to find sensitive information, vulnerabilities, or misconfigurations exposed on public websites. This technique is a crucial part of the reconnaissance phase in ethical hacking.
Question 6: Stan wiretapped his ex-girlfriend's phone to monitor her current partner. What is an example of wiretapping?
- Surveillance
- Looking
- Reconnaissance
- Sniffing (Correct answer)
Correct answer: Sniffing
Wiretapping, in the context of network security, is a form of sniffing. Sniffing refers to the act of capturing and inspecting data packets that pass over a computer network. While traditional wiretapping involves physical access, network sniffing achieves a similar goal by intercepting digital communications to monitor activity.
Question 7: Cloud computing provides users and organization subscribers delivery of different IT services over a network. Which type of cloud computing is geared toward software development and provides a development platform that authorizes subscribers to develop applications without building the infrastructure it would normally take to develop and launch software?
- Hardware as a Service
- Software as a Service
- Platform as a Service (Correct answer)
- Infrastructure as a Service
Correct answer: Platform as a Service
Platform as a Service (PaaS) provides a complete development and deployment environment in the cloud, including operating systems, programming language execution environments, databases, and web servers. It allows developers to build, run, and manage applications without the complexity of building and maintaining the underlying infrastructure. This makes it ideal for software development.
Question 8: What best characterizes ARP Poisoning?
- The process of injecting faulty entries in machines by changing the ARP cache (Correct answer)
- The process of injecting faulty entries in machines by removing the ARP cache
- The process of injecting faulty entries in machines by flooding the ARP cache
- The process of injecting faulty entries in machines by changing the APR cache
Correct answer: The process of injecting faulty entries in machines by changing the ARP cache
ARP Poisoning (or ARP Spoofing) is a type of attack where an attacker sends forged ARP (Address Resolution Protocol) messages onto a local area network. This results in the attacker's MAC address being associated with the IP address of another host, such as the default gateway, in other devices' ARP caches, allowing the attacker to intercept traffic.
Question 9: Which of the following describes the threat agent's strategy for taking advantage of vulnerability?
- A race condition
- A threat vector (Correct answer)
- A threat agent
- A Hazard
Correct answer: A threat vector
A threat vector is the pathway or method that a threat agent uses to gain access to a target and exploit a vulnerability. It describes the specific means by which an attack can be launched, such as phishing emails, malicious software, or unpatched network services. Understanding threat vectors is crucial for designing effective defenses.
Question 10: Which device consolidates several security tasks into a single system that may be put at a single network point?
- Intrusion Detection Systems
- Universal Threat Management
- Unidentified Threat Management
- Unified Threat Management (Correct answer)
Correct answer: Unified Threat Management
Unified Threat Management (UTM) is a comprehensive security solution that combines multiple security features into a single appliance or service. These features typically include firewall, intrusion prevention, antivirus, anti-spam, and content filtering, simplifying security management for organizations by consolidating various security tasks into one system.
Question 11: What is the definition of Threat?
- A threat is something that has the possibility to incur a breach of confidentiality, integrity, or availability. (Correct answer)
- A threat is a weakness in a system.
- When the vulnerability is triggered, it is called a threat.
- The pathway the threat agent takes to exploit vulnerability is called a threat
Correct answer: A threat is something that has the possibility to incur a breach of confidentiality, integrity, or availability.
In cybersecurity, a threat is defined as any potential danger that could exploit a vulnerability and cause harm to an information system or organization. This harm typically manifests as a breach of the CIA triad: Confidentiality (unauthorized disclosure), Integrity (unauthorized modification), or Availability (unauthorized denial of access). Threats are distinct from vulnerabilities, which are weaknesses.
Free Certified Ethical Hacker MCQ Questions and Answers 1
Which of these is not an element of security?