Certified Ethical Hacker Vulnerability Assessment and Exploitation 3

Question 1

Which automated exploitation framework is most commonly referenced in CEH for developing and testing exploits?

Accepted Answer

Metasploit Framework

Answer

The Metasploit Framework is the most widely used open-source exploitation framework, providing tools for exploit development, delivery, and post-exploitation.

Question 2

What is 'privilege escalation' in the context of exploitation?

Accepted Answer

Increasing the attacker's level of access beyond the initial compromise

Answer

Privilege escalation involves leveraging vulnerabilities or misconfigurations to gain higher-level permissions (e.g., from a standard user to administrator or root).

Question 3

Which technique is used to exploit a vulnerability in a client application by luring a victim to visit a malicious webpage?

Accepted Answer

Client-Side Exploitation

Answer

Client-side exploitation targets vulnerabilities in browsers, plugins, or document readers by tricking the user into visiting a malicious page or opening a malicious file.

Question 4

What is the CEH term for a vulnerability database that lists publicly known security flaws with a standardized identifier?

Accepted Answer

CVE (Common Vulnerabilities and Exposures)

Answer

The CVE (Common Vulnerabilities and Exposures) database provides standardized identifiers (e.g., CVE-2021-44228) for publicly known cybersecurity vulnerabilities.

Question 5

What is a 'false positive' in the context of vulnerability scanning?

Accepted Answer

A vulnerability reported by the scanner that does not actually exist

Answer

A false positive occurs when a vulnerability scanner incorrectly identifies a non-vulnerable system as vulnerable, requiring manual verification to confirm real findings.

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Vulnerability Assessment and Exploitation 3