Certified Ethical Hacker Ethical Hacker Security 2

Question 1

Which phase of ethical hacking involves actively probing a target to find open ports and live hosts?

Accepted Answer

Scanning

Answer

Reconnaissance

Answer

Covering tracks

Answer

Reporting

Question 2

A penetration tester is given no prior knowledge of the target environment. What type of test is this?

Accepted Answer

Black-box

Answer

White-box

Answer

Gray-box

Answer

Crystal-box

Question 3

Which tool is most commonly used for network discovery and port scanning?

Accepted Answer

Nmap

Answer

Wireshark

Answer

John the Ripper

Answer

Metasploit

Question 4

What does a TCP SYN scan rely on to avoid completing the full handshake?

Accepted Answer

Sending RST after SYN-ACK

Answer

Sending a FIN packet first

Answer

Spoofing the MAC address

Answer

Encrypting the payload

Question 5

Which document legally authorizes a penetration test and defines its scope?

Accepted Answer

Rules of Engagement

Answer

NDA

Answer

Bug bounty policy

Answer

Acceptable Use Policy

Question 6

What is the primary goal of the 'covering tracks' phase for a malicious attacker?

Accepted Answer

Hide evidence of intrusion

Answer

Escalate privileges

Answer

Map the network

Answer

Establish persistence

Question 7

Which type of footprinting collects data without directly interacting with the target system?

Accepted Answer

Passive footprinting

Answer

Active footprinting

Answer

Vulnerability scanning

Answer

Banner grabbing