Certified Ethical Hacker Ethical Hacker Methodology 2

Question 1

An ethical hacker reviews a target company's job postings, employee LinkedIn profiles, and DNS records without sending any packets to the target. Which phase and technique is this?

Accepted Answer

Passive reconnaissance

Answer

Active scanning

Answer

Gaining access

Answer

Covering tracks

Question 2

Which document is signed before an engagement begins to define what systems may be tested and the boundaries of the test?

Accepted Answer

Rules of Engagement

Answer

Incident response plan

Answer

Disaster recovery plan

Answer

Acceptable use policy

Question 3

During scanning, a tester uses Nmap with the -sS flag. What type of scan is being performed?

Accepted Answer

SYN stealth scan

Answer

TCP connect scan

Answer

UDP scan

Answer

Ping sweep

Question 4

What is the primary goal of the 'maintaining access' phase of the methodology?

Accepted Answer

Establish persistent access for return entry

Answer

Identify open ports

Answer

Erase log files

Answer

Map the network topology

Question 5

Which phase involves clearing logs and removing tools to avoid detection by defenders?

Accepted Answer

Covering tracks

Answer

Reconnaissance

Answer

Scanning

Answer

Enumeration

Question 6

Enumeration typically follows scanning. What does enumeration extract that scanning does not?

Accepted Answer

Active usernames, shares, and service details

Answer

Live host IP addresses

Answer

Open port numbers

Answer

ICMP echo replies

Question 7

A penetration tester wants legal protection clarifying they are authorized to test. Which agreement is most relevant?

Accepted Answer

Get-out-of-jail-free / authorization letter

Answer

Non-disclosure agreement only

Answer

Service level agreement

Answer

Memorandum of understanding for marketing