Certified Ethical Hacker Network Security and Scanning 3

Question 1

Which scanning technique uses banner grabbing to gather information?

Accepted Answer

Connecting to a service to read its response header

Answer

Sending malformed ICMP packets

Answer

Poisoning the ARP table

Answer

Spoofing the source MAC

Question 2

Why is a UDP scan generally slower and less reliable than a TCP scan?

Accepted Answer

UDP is connectionless and open ports often send no response

Answer

UDP encrypts all packets

Answer

UDP requires authentication

Answer

UDP uses a three-way handshake

Question 3

What is the main goal of network enumeration after scanning?

Accepted Answer

To extract usernames, shares, and services from identified hosts

Answer

To encrypt the target's disk

Answer

To physically locate the server

Answer

To register a new domain

Question 4

Which tool is commonly used to capture and analyze network packets?

Accepted Answer

Wireshark

Answer

Nessus

Answer

Metasploit

Answer

John the Ripper

Question 5

An attacker performs a DNS zone transfer (AXFR). What is the risk if it succeeds?

Accepted Answer

The full list of DNS records for the domain is exposed

Answer

The attacker can reset all passwords

Answer

The web server crashes

Answer

All emails are intercepted

Question 6

What does TTL (Time To Live) manipulation help an attacker achieve?

Accepted Answer

Evading some IDS by controlling packet hop expiration

Answer

Encrypting payloads

Answer

Bypassing all firewalls automatically

Answer

Speeding up DNS resolution

Question 7

Which Nmap timing template is the most aggressive and fastest?

Accepted Answer

-T5 (insane)

Answer

-T0 (paranoid)

Answer

-T2 (polite)

Answer

-T3 (normal)