Certified Ethical Hacker Ethical Hacker Methodology 4

Question 1

During footprinting, which tool would best retrieve domain registration and ownership details?

Accepted Answer

WHOIS

Answer

Wireshark

Answer

Metasploit

Answer

John the Ripper

Question 2

A tester captures a service's response containing version and OS hints by connecting to an open port. This is called what?

Accepted Answer

Banner grabbing

Answer

Password spraying

Answer

DNS poisoning

Answer

Session hijacking

Question 3

Why must an ethical hacker document every action and finding during an engagement?

Accepted Answer

For reproducibility, reporting, and legal accountability

Answer

To increase the bill

Answer

Documentation is optional and rarely done

Answer

To slow down the test

Question 4

Which of these is an example of active reconnaissance?

Accepted Answer

Performing a port scan against the target

Answer

Reading a company's public press releases

Answer

Browsing employee social media

Answer

Querying public WHOIS records

Question 5

What is the main purpose of the final reporting phase of a penetration test?

Accepted Answer

To deliver findings, risk ratings, and remediation guidance

Answer

To exploit remaining systems

Answer

To install persistence

Answer

To scan for new hosts

Question 6

A tester uses the OSINT framework to gather intelligence. What does OSINT stand for?

Accepted Answer

Open Source Intelligence

Answer

Open Systems Internal Network Testing

Answer

Operational Security Intelligence

Answer

Online Scanning Internet Tool

Question 7

Which scanning technique is used specifically to identify live hosts on a network?

Accepted Answer

Ping sweep

Answer

Vulnerability scan

Answer

Password crack

Answer

Privilege escalation