Certified Ethical Hacker Certified Ethical Hacker MCQ 4

Question 1

Which phase of the CEH hacking methodology comes immediately after gaining access?

Accepted Answer

Maintaining access

Answer

Scanning

Answer

Reconnaissance

Answer

Covering tracks

Question 2

What kind of malware disguises itself as legitimate software to trick users into installing it?

Accepted Answer

Trojan

Answer

Worm

Answer

Rootkit

Answer

Logic bomb

Question 3

Which attack injects malicious scripts into web pages viewed by other users?

Accepted Answer

Cross-Site Scripting (XSS)

Answer

CSRF

Answer

Directory traversal

Answer

Buffer overflow

Question 4

What is the purpose of a rainbow table in password attacks?

Accepted Answer

Precomputed hashes to reverse passwords quickly

Answer

Storing captured network packets

Answer

Mapping open ports to services

Answer

Generating fake SSL certificates

Question 5

Which protocol does a deauthentication attack abuse to disconnect wireless clients?

Accepted Answer

802.11 management frames

Answer

HTTPS

Answer

SNMP

Answer

FTP

Question 6

What is the best defense against a buffer overflow attack at the development level?

Accepted Answer

Input validation and bounds checking

Answer

Disabling logging

Answer

Using longer passwords

Answer

Increasing bandwidth

Question 7

Which term describes searching through an organization's discarded materials for sensitive information?

Accepted Answer

Dumpster diving

Answer

Shoulder surfing

Answer

Tailgating

Answer

Pretexting