Ethical Hacking Exam Questions
Course Introduction
Ethical Hacking is a comprehensive course that explores the methodologies, tools, and techniques used by security professionals to assess and strengthen the defenses of computer systems and networks. Students will learn how to think like hackers in order to identify vulnerabilities, understand various attack vectors, and apply appropriate countermeasures. The course covers topics such as penetration testing, footprinting and reconnaissance, scanning networks, malware threats, social engineering, and exploitation. Emphasis is placed on legal and ethical considerations, as well as real-world scenarios to ensure students acquire both practical skills and a firm understanding of professional and ethical responsibilities in cybersecurity.
Recommended Textbook
Hands On Ethical Hacking and Network Defense 2nd Edition by Michael T. Simpson
Available Study Resources on Quizplus
13 Chapters
673 Verified Questions
673 Flashcards
Source URL: https://quizplus.com/study-set/2085 Page 2
Chapter 1: Ethical Hacking Overview
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41510
Sample Questions
Q1) As a security tester, you can't make a network impenetrable.
A)True
B)False
Answer: True
Q2) Why are employees sometimes not told that the company is being monitored?
Answer: If a company knows that it's being monitored to assess the security of its systems,employees might behave more vigilantly and adhere to existing procedures.Many companies don't want this false sense of security;they want to see how personnel operate without forewarning that someone might attempt to attack their network.
Q3) The International Council of Electronic Commerce Consultants (EC-Council) has developed a certification designation called ____.
A)CompTIA Security+
B)OSSTMM Professional Security Tester (OPST)
C)Certified Information Systems Security Professional (CISSP)
D)Certified Ethical Hacker (CEH)
Answer: D
Q4) copies code from knowledgeable programmers instead of creating the code himself/herself
Answer: F
Page 3
To view all questions and flashcards with answers, click on the resource link above.
Chapter 2: Tcpip Concepts Review
Available Study Resources on Quizplus for this Chatper
57 Verified Questions
57 Flashcards
Source URL: https://quizplus.com/quiz/41511
Sample Questions
Q1) What is a Class B IP address?
Answer: These address are evenly divided between a two-octet network and a two-octet host address,allowing more than 65,000 host computers per Class B network address.Large organizations and Internet service providers are often assigned Class B Internet addresses.Class B addresses have the format "network.network.node.node".
Q2) An octal digit can be represented with only three bits because the largest digit in octal is seven.
A)True
B)False
Answer: True
Q3) What steps are involved in TCP's "three-way handshake"?
Answer: 1.Host A sends a TCP packet with the SYN flag set (that is, a SYN packet) to Host B. 2.After receiving the packet, Host B sends Host A its own SYN packet with an ACK flag (a SYN-ACK packet) set.
3.In response to the SYN-ACK packet from Host B, Host A sends Host B a TCP packet with the ACK flag set (an ACK packet).
To view all questions and flashcards with answers, click on the resource link above. Page 4
Chapter 3: Network and Computer Attacks
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41512
Sample Questions
Q1) ____ is concerned with the security of computers or devices that are part of a network infrastructure.
A)Attack security
B)Cybercrime
C)Computer security
D)Network security
Answer: D
Q2) Which of the following provides the most secure method of securing a company's assets?
A)rotary locks
B)combination locks
C)card access
D)deadbolt locks
Answer: C
Q3) The average home user or small-business owner doesn't typically use Telnet.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above.
Page 5
Chapter 4: Footprinting and Social Engineering
Available Study Resources on Quizplus for this Chatper
51 Verified Questions
51 Flashcards
Source URL: https://quizplus.com/quiz/41513
Sample Questions
Q1) Server received invalid response from upstream server
A)HTTP 400 Bad Request
B)HTTP 403 Forbidden
C)HTTP 404 Not Found
D)HTTP 405 Method Not Allowed
E)HTTP 408 Request Timeout
F)HTTP 500 Internal Server Error
G)HTTP 502 Bad Gateway
H)HTTP 503 Service Unavailable
I)HTTP 504 Gateway Timeout
Q2) ____ can be used to gather information useful for computer criminals, like company phone directories, financial reports, interoffice memos, resumes of employees, etc.
A)Shoulder surfing
B)Footprinting
C)Piggybacking
D)Dumpster diving
Q3) What is "competitive intelligence"?
Q4) List at least five tools available for footprinting.
Q5) How can DNS be used for footprinting?
6
To view all questions and flashcards with answers, click on the resource link above.
Chapter 5: Port Scanning
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41514
Sample Questions
Q1) What are the problems on depending on ping sweeps to find out which hosts are "live"?
Q2) Some attackers want to be hidden from network devices or IDSs that recognize an inordinate amount of pings or packets being sent to their networks, so they use ____________________ attacks that are more difficult to detect.
Q3) You can search for known vulnerabilities in a host computer by using the Common Vulnerabilities and Exposures Web site.
A)True
B)False
Q4) The ____ option of Nmap is used to perform a TCP SYN stealth port scan.
A)-sS
B)-sU
C)-sV
D)-S
Q5) Closed ports respond to a(n) ____ with an RST packet.
A)XMAS scan
B)SYN scan
C)Connect scan
D)ACK scan
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Enumeration
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41515
Sample Questions
Q1) What is Hyena and what can it be used for?
Q2) The enumeration process for Windows Me is the same as for Windows 98.
A)True
B)False
Q3) developed by contributors and sponsored by Red Hat
A)Windows 98
B)Windows 95
C)Windows Server 2003
D)Fedora Linux
E)Solaris
F)Windows XP Professional
G)Novell Open Enterprise Server
H)Windows 2000 Server/Professional
I)Windows NT 3.51 Server/Workstation
Q4) Nessus can be used to enumerate Windows OSs, as well as ____________________ systems.
Q5) NBTscan is a tool for enumerating Windows OSs. A)True
B)False
Q6) Why is enumeration a more intrusive process than port scanning or footprinting?
Page 8
To view all questions and flashcards with answers, click on the resource link above.
Chapter 7: Programming for Security Professionals
Available Study Resources on Quizplus for this Chatper
53 Verified Questions
53 Flashcards
Source URL: https://quizplus.com/quiz/41516
Sample Questions
Q1) The ____ special character is used with the printf() function in C to indicate a new line.
A)\t
B)\0
C)\n
D)\l
Q2) tells the compiler how to convert a value in a function
A)pseudocode
B)conversion specifier
C)class
D)bug
E)variable
F)do loop
G)compiler
H)while loop
I)gcc
Q3) Many scripts and programs for security professionals are written in ________________________________________, a powerful scripting language.
Q4) List and describe the variable types used in C.
Page 9
Q5) What is a dangerous thing about programming in the C language?
To view all questions and flashcards with answers, click on the resource link above.
Chapter 8: Desktop and Server Os Vulnerabilities
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41517
Sample Questions
Q1) Trusted Computer Solutions____ program is used to tighten Linux system security configuration by using templates.
A)OpenVAS
B)MBSA
C)SQL Server
D)Security Blanket
Q2) SELinux contains several features and modules that use ____, an OS security mechanism that enforces access rules based on privileges for interactions between processes, files, and users.
A)Mandatory Access Control (MAC)
B)Server Message Block (SMB)
C)Common Internet File System (CIFS)
D)Microsoft Baseline Security Analyzer (MBSA)
Q3) What is Server Message Block (SMB) used for in Windows? Can hacking tools still damage a network using SMB?
Q4) What should a password policy include?
Q5) What is Samba used for?
Q6) What is the purpose of a file system?
Q7) RPC stands for ________________________.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Embedded Operating Systems: The Hidden Threat
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41518
Sample Questions
Q1) Rootkits that pose the biggest threat to any OS are those that infect a device's ____.
A)firmware
B)testware
C)middleware
D)fireware
Q2) designed an embedded OS for the F-35 Joint Strike Fighter
A)Windows Embedded Standard
B)Green Hill Software
C)RTLinux
D)VxWorks
E)RTEMS
F)embedded operating system
G)Quebec
H)QNX
I)SCADA
Q3) Embedded systems include their own operating system, called a(n) "_________________________".
Q4) Why do many people dismiss the topic of embedded device security?
Q5) List at least four best practices for protecting embedded OSs.
To view all questions and flashcards with answers, click on the resource link above. Page 11
Chapter 10: Hacking Web Servers
Available Study Resources on Quizplus for this Chatper
52 Verified Questions
52 Flashcards
Source URL: https://quizplus.com/quiz/41519
Sample Questions
Q1) Connecting to a Microsoft Active Directory Service database with OLE DB requires using ____ as the provider.
A)ADSDSOOBJECT
B)MySQLProv
C)SQLOLEDB
D)SNAOLEDB
Q2) To keep attackers from knowing the directory structure you create on an IIS Web server, creating a(n) ____________________ is recommended so that the path a user sees on the Web browser is not the actual path on the Web server.
Q3) Connecting to a MySQL database with OLE DB requires using ____ as the provider.
A)ADSDSOOBJECT
B)MySQLProv
C)SQLOLEDB
D)SNAOLEDB
Q4) In a(n) ____ flaw, a Web browser might carry out code sent from a Web site.
A)broken access control
B)command injection
C)cross-site scripting
D)unvalidated parameters
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 11: Hacking Wireless Networks
Available Study Resources on Quizplus for this Chatper
52 Verified Questions
52 Flashcards
Source URL: https://quizplus.com/quiz/41520
Sample Questions
Q1) What is WEP? Is it a good way to secure wireless networks?
Q2) What is the function of a WG of the IEEE?
Q3) The first wireless technology standard, ____________________, defined the specifications for wireless connectivity at 1 Mbps and 2 Mbps in a LAN.
Q4) The 802.11 standard applies to the Physical layer of the OSI model, which deals with wireless connectivity issues of fixed, portable, and moving stations in a local area, and the Media Access Control (MAC) sublayer of the ____.
A)Network Link layer
B)Data Link layer
C)transport layer
D)session layer
Q5) One of the default SSIDs used by D-Link is ____.
A)Tsunami
B)Wireless
C)default
D)linksys
Q6) What is PPP?
Q7) What is frequency-hopping spread spectrum (FHSS)?
Q8) What is wardriving?
To view all questions and flashcards with answers, click on the resource link above. Page 13
Chapter 12: Cryptography
Available Study Resources on Quizplus for this Chatper
58 Verified Questions
58 Flashcards
Source URL: https://quizplus.com/quiz/41521
Sample Questions
Q1) property of a good hashing algorithm
A)asymmetric encryption
B)collision free
C)symmetric encryption
D)certificate
E)hashing
F)collision
G)stream cipher
H)message digest
I)block cipher
Q2) operates on blocks of plaintext
A)asymmetric encryption
B)collision free
C)symmetric encryption
D)certificate
E)hashing
F)collision
G)stream cipher
H)message digest
I)block cipher
To view all questions and flashcards with answers, click on the resource link above.
Page 14
Chapter 13: Network Protection Systems
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/41522
Sample Questions
Q1) What are the advantages and disadvantages of hardware and software firewalls?
Q2) A standard IP access list is restricted to source IP addresses.
A)True
B)False
Q3) ____________________ honeypots are created by using a programming language rather than configuring a physical device.
Q4) small network containing resources that a company wants to make available to Internet users
A)stateful packet filter
B)firewall
C)NAT
D)DMZ
E)stateless packet filter
F)user mode
G)enable mode
H)ASA
I)privileged mode
Q5) What is the difference between passive and active IDSs?
Q6) List the components of a Cisco router.
Q7) What are the interfaces in a Cisco router?
To view all questions and flashcards with answers, click on the resource link above. Page 15