"CEH Practice Test - SimeonOnSecurity"

Question 1

"Which of the following is a social engineering attack?"

Accepted Answer

"Phishing is a social engineering attack where an attacker sends fraudulent emails or messages to trick the victim into giving away sensitive information or access to their system. DDoS, SQL injection, and cross-site scripting are all types of technical attacks, not social engineering."

Question 2

"What is a vulnerability assessment?"

Accepted Answer

"A vulnerability assessment is a process of identifying and prioritizing security weaknesses in a system. It is not a manual analysis of a system's security, a type of penetration testing, or a tool for encrypting data."

Question 3

"What is a SQL injection attack?"

Accepted Answer

"A SQL injection attack is an attack that exploits a vulnerability in the SQL database to execute malicious SQL statements. It is not a type of social engineering attack, a flooding attack, or an attack that uses malware to steal data."

Question 4

"What is a zero-day vulnerability?"

Accepted Answer

"A zero-day vulnerability is a vulnerability that is unknown to the vendor or security community, and for which there is no patch or mitigation available. It is not a vulnerability that has been patched but still exists, a vulnerability that has been exploited in the wild, or a vulnerability that can only be exploited on the zeroth day of a new year."

Question 5

"What is a man-in-the-middle attack?"

Accepted Answer

"A man-in-the-middle attack is an attack that intercepts and modifies network traffic between two parties. It is not an attack that floods a network with traffic, uses malware to steal data, or impersonates a legitimate website or service."

Question 6

"What is the difference between a virus and a worm?"

Accepted Answer

"A virus is a self-replicating malware that needs a host program to propagate, while a worm is a self-replicating malware that does not need a host program. They both propagate through different means and have different characteristics."

Question 7

"What is a buffer overflow?"

Accepted Answer

"A buffer overflow is an attack that exploits a vulnerability in a program's input validation to execute arbitrary code or crash the program. It is not an attack that floods a network with traffic, uses malware to steal data, or impersonates a legitimate website or service."

Question 8

"What is a denial-of-service (DoS) attack?"

Accepted Answer

"A denial-of-service (DoS) attack is an attack that floods a network or system with traffic to make it unavailable to users. It is not an attack that steals sensitive data, infects a system with malware, or exploits a vulnerability in a program's input validation."

Question 9

"What is a VPN?"

Accepted Answer

"A VPN (virtual private network) is a network technology that provides secure remote access to a network over the internet. It is not a type of firewall, a protocol for encrypting email messages, or a tool for analyzing network traffic."

Question 10

"What is steganography?"

Accepted Answer

"Steganography is a technique for hiding data within other data, such as an image file or an audio file. It is not a technique for encrypting data, a type of virus that infects system files, or a type of social engineering attack."

Question 11

"What is a rainbow table?"

Accepted Answer

"A rainbow table is a database of precomputed hashes for common passwords, used to speed up password cracking attacks. It is not a type of virus that infects system files, a tool for analyzing network traffic, or a type of malware that spreads through email attachments."

Question 12

"What is a firewall?"

Accepted Answer

"A firewall is a security mechanism that filters network traffic based on predefined rules. It is not a tool for analyzing network traffic, a type of virus that infects system files, or a virtual private network that provides secure remote access to a network."

Question 13

"What is the difference between symmetric and asymmetric encryption?"

Accepted Answer

"Symmetric encryption uses the same key for encryption and decryption, while asymmetric encryption uses different keys. They have different characteristics and use cases. The speed, security, and usage of encryption depend on the specific algorithm and implementation."

Question 14

"What is a public key infrastructure (PKI)?"

Accepted Answer

"A public key infrastructure (PKI) is a system for managing digital certificates and keys used in asymmetric encryption. It is not a database of precomputed hashes for common passwords, a type of firewall that filters network traffic, or a tool for analyzing network traffic."

Question 15

"What is footprinting in the context of information gathering?"

Accepted Answer

"Footprinting is a technique for discovering sensitive information through online sources, such as public websites, social media, or search engines. It is not a method of scanning a network, a process of mapping out network architecture, or a way of identifying vulnerabilities."

Question 16

"What is social engineering?"

Accepted Answer

"Social engineering is a method of manipulating people to divulge confidential information, such as passwords, personal details, or access to systems. It is not a technique for discovering information through online sources, a type of network scanning, or a process of mapping out network architecture."

Question 17

"What is OSINT?"

Accepted Answer

"OSINT (Open Source Intelligence) is a technique for discovering sensitive information through online sources, such as public websites, social media, or search engines. It is not a type of operating system, a tool for scanning a network, or a type of social engineering attack."

Question 18

"What is a threat actor?"

Accepted Answer

"A threat actor is a person or group that carries out attacks on a system or network, such as a hacker, a cybercriminal, or a state-sponsored attacker. It is not a type of malware, a tool for scanning a network, or a type of firewall."

Question 19

"What is a passive reconnaissance technique?"

Accepted Answer

"Passive reconnaissance techniques involve listening in on network traffic to gather information, such as network topology, system configuration, or user credentials. It is not a technique that involves directly interacting with a target system, sending network packets, or impersonating a trusted entity."

Question 20

"What is a port scan?"

Accepted Answer

"A port scan is a technique that involves sending network packets to a target to identify open ports, protocols, and services. It is not a passive reconnaissance technique that involves listening in on network traffic, a technique that involves directly interacting with a target system, or a technique that involves impersonating a trusted entity."

Question 21

"What is the difference between active and passive reconnaissance?"

Accepted Answer

"Active reconnaissance involves sending network packets to a target to gather information, while passive reconnaissance involves listening in on network traffic to gather information. They have different characteristics and risks, depending on the specific technique and context."

Question 22

"What is DNS enumeration?"

Accepted Answer

"DNS enumeration is a technique that involves gathering information about DNS servers and domain names, such as IP addresses, MX records, or subdomains. It is not a technique that involves scanning a network, mapping out network architecture, or stealing data from a system."

Question 23

"What is a vulnerability scan?"

Accepted Answer

"A vulnerability scan is a technique that involves searching for known security flaws in a system or application, such as outdated software, weak passwords, or misconfigured settings. It is not a technique that involves directly interacting with a target system, scanning a network to identify open ports, or analyzing network traffic to detect anomalies."

Question 24

"What is a ping sweep?"

Accepted Answer

"A ping sweep is a technique that involves sending network packets to a target to check if it is online, and to identify its IP address and hostname. It is not a technique that involves scanning a network to identify open ports, analyzing network traffic to detect anomalies, or listening in on network traffic to gather information."

Question 25

"What is a web application vulnerability scanner?"

Accepted Answer

"A web application vulnerability scanner is a tool that searches for known security flaws in web applications, such as SQL injection, cross-site scripting, or file inclusion. It is not a tool that analyzes network traffic to detect anomalies, scans a network to identify open ports, or listens in on network traffic to gather information."

CEH Practice Test - SimeonOnSecurity

What is a cross-site scripting (XSS) attack?