CEHv12: Certified Ethical Hacker Practice Questions Part 1

Which of the following does an ethical hacker require to penetrate a system?

What is Grey box Pentesting?

If you have been hired to perform an attack against a target system to find and exploit vulnerabilities, what type of hacker are you?

Which of the following describes an attacker who goes after a target to draw attention to a cause?

What level of knowledge does a script kiddie have?

A white-box test requires ___________.

Which of the following describes a hacker who attacks without regard for being caught or punished?

A penetration test is required for which of the following reason?

Hackers using their skills for both benign and malicious goals at different times are _____________.

Vulnerability analysis is basically ________________.

What is Black-box testing?

What does TOE stand for?

The term “Vulnerability” refers to __________________.

What are the basic ways to perform Footprinting?

Which one of the following best explains Footprinting?

What is the purpose of Social Engineering?

Which feature is used to make a search more appropriate?

Wayback Machine is used to ________________.

DGAR, CNBC, and LexisNexis are used for _______________.

Which record type will reveal the information about the Host IP address?

Which record type will reveal the information about Domain’s Mail Server (MX)?

_________________ is the most popular Web Reconnaissance framework used for information-gathering purposes as well as network detection.

Which tool can be used to view web server information?

To extract information regarding a domain name registration, which of the following is most appropriate?

Which of the following statement below is correct?

Is three-way handshaking the process of?

Which of the following tools is used for Banner Grabbing?

Which server anonymizes the web traffic to provide anonymity?

Which of the following tools is capable of performing a customized scan?

Which of the following is not a TCP Flag?

A successful three-way handshaking consists of _________________.

The method of pinging a range of IP addresses is called ________________.

The scanning technique in which TCP three-way handshaking session is initiated and completed is called ___________________.

Xmas Scan is a type of Inverse TCP Flag scanning in which ________________.

Which statement is true about Enumeration?

NetBIOS is basically ________________.

Which of the following does not belong to NetBIOS Enumeration?

The command nbstat with the option “-a” extracts the information of _______________.

The command nbstat with the option “-A” extracts the information of _____________.

______________ is not an example of SNMP Manager software.

Which of the following is true about SNMP?

SNMPv3 supports ________________.

Which port does not belong to NetBIOS over TCP (NetBT)?

Which of the following statements is true about NTP authentication?

The process of finding weaknesses, design flaws, and security concerns in a network, Operating System, applications, or website is called:

Which of the following is a Pre-Assessment phase of the Vulnerability Assessment Life-Cycle?

The Vulnerability Post Assessment phase includes _________________.

The vulnerability assessment process in which the auditor follows different strategies for each network component is called __________________.

An approach to assist that depends on the inventory of protocols in an environment is called _____________________.

CVSS Stands for ________________________.

The Vulnerability Database launched by NIST is ________________________.

Which of the following is not a Vulnerability Scanning tool?

Which of the following is not an example of a Non-Electronic / Non-Technical Password Attack?

Anthony is cracking a password using a list of known and common phrases until the password is accepted. Which type of attack is this?

An attacker is cracking the password by trying every possible combination of alphanumeric characters. Which of the following types of Password Cracking is this?

The addition of characters in the password to make it a one-way function is called ________________________.

Which of the following is a framework that can perform automated attacks on services, applications, ports, and unpatched software?

______________ is the term for cracking passwords using pre-computed hashes.

How can you protect yourself from a Rainbow table attack?

Which of the following definitions of malware is the most accurate?

Which of the following does not belong to the virus?

Malware Static Analysis is ________________________.

Which of the following defines the best Malware Dynamic Analysis?

Which of the following does not belongs to Trojan deployment?

_____________ is used to hide malicious programs while creating Trojan.

____________ is used to bind malicious programs while creating Trojan.

____________ is used to drop malicious programs at the target.

Sniffing is carried out on ________________________.

Sniffing without interfering is known as ________________________.

The port that allows you to send a copy of the packet over another port at layer 2 is called ________________________.

Wiretapping with legal permission is known as ________________________.

Which one of the following is the best option to defend against ARP poisoning?

Which of the following Wireshark filters display packet from 10.0.0.1?

A phishing attack is performed over ________________________.

The basic purpose of Social Engineering attacks is ________________________.

Which of the following is not a form of Human-based Social Engineering?

An attack performed by a disgruntled employee of an organization is called ________________________.

To defend against a phishing attack, a necessary step is ________________________.

The technique of passing the restricted area by an unauthorized person with an authorized person is called ________________________.

The technique of an illegal individual passing into a restricted location by following an authorized person is known as ________________________.

When an attack denies the services and resources and becomes unavailable for legitimate users, it is known as ________________________.

DoS attack in which flooding of the request overloads a web application or web server is known as ________________________.

The ________________ is a DoS attack focused on hardware sabotage.

DoS attack in which Intermediary and Secondary victims are also involved in the process of launching a DoS attack is known as ________________________.

The _________ is a scanning technique that uses a list of potentially susceptible machines.

The process of scanning any IP address in the IP address space for vulnerabilities is known as ________________________.

When an attacker directly exploits and copies the malicious code to the victim’s machine, the propagation is called ________________________.

When an attacker exploits the vulnerable system and opens a connection to transfer malicious code, the propagation is called ________________________.

The ___________ is an automated approach for detecting DoS/DDoS attacks using input signal analysis.

Sequential Change-Point detection algorithm uses the ________________ technique to detect DoS/DDoS attacks.

The _______________ Filtering Standard is intended to reduce DDoS attacks by providing ingress filtering for multi-homed networks.

The process of silently dropping the traffic (either incoming or outgoing traffic) so that the source is not notified about the discarding of the packet is known as ________________________.

Which statement defines session hijacking more accurately?

Which of the following do not belong to a session hijacking attack?

In session hijacking, a technique called ______________ is used to send packets along a specified route, i.e., the same as the victim’s path.

Session Fixation is vulnerable to _______________.

The HIDS system is used to keep track of what’s going on the _____________.

A computer system is placed between public and private networks, and certain roles and responsibilities are assigned to this computer. This system is known as ________________________.

Cisco ASA with FirePOWER Services is considered an example of ________.

The devices or systems that are deployed to trap attackers attempting to gain unauthorized access to the system or network as they are deployed in an isolated environment and being monitored are known as ________________________.