Certified Ethical Hacker Ethical Hacker Methodology 5

Question 1

After gaining a low-privileged shell, a tester exploits a misconfiguration to become root. What is this step called?

Accepted Answer

Privilege escalation

Answer

Lateral movement

Answer

Footprinting

Answer

Banner grabbing

Question 2

Which classification describes a hacker who tests systems without permission but discloses flaws to the owner without malicious intent?

Accepted Answer

Gray hat

Answer

White hat

Answer

Black hat

Answer

Script kiddie

Question 3

A client only wants the tester to assess externally facing web applications. Where is this restriction defined?

Accepted Answer

In the scope of the engagement

Answer

In the covering-tracks phase

Answer

In the exploit database

Answer

In the banner of each service

Question 4

What is the purpose of obtaining a proof of concept (PoC) during exploitation?

Accepted Answer

To demonstrate that a vulnerability is genuinely exploitable

Answer

To permanently damage the system

Answer

To erase the client's logs

Answer

To hide the tester's identity

Question 5

Which phase would include using tools like Maltego to map relationships between people, domains, and infrastructure?

Accepted Answer

Reconnaissance

Answer

Covering tracks

Answer

Maintaining access

Answer

Privilege escalation

Question 6

What ethical principle requires that a tester stop and notify the client immediately upon discovering an active breach by a real attacker?

Accepted Answer

Duty to report critical findings promptly

Answer

Continue testing silently

Answer

Cover the attacker's tracks

Answer

Exploit it further for the report

Question 7

Why does an ethical hacker restore systems to their original state at the end of an engagement?

Accepted Answer

To remove test artifacts, accounts, and changes made during testing

Answer

To leave backdoors active

Answer

To erase the client's production data

Answer

To keep persistence for future tests