Certified Ethical Hacker Vulnerability Assessment and Exploitation 1

Question 1

What is the difference between a vulnerability assessment and a penetration test?

Accepted Answer

A vulnerability assessment identifies weaknesses; a pen test actively exploits them

Answer

They are identical processes

Answer

A pen test only uses automated tools; a vulnerability assessment uses manual techniques

Answer

A vulnerability assessment is performed externally; a pen test is internal only

Question 2

Which CVSS metric indicates how easily an attacker can repeat a successful exploit?

Accepted Answer

Attack Complexity

Answer

Privileges Required

Answer

Confidentiality Impact

Answer

Scope

Question 3

Which tool is an industry-standard open-source vulnerability scanner used in CEH assessments?

Accepted Answer

OpenVAS

Answer

Metasploit

Answer

Burp Suite

Answer

John the Ripper

Question 4

What type of vulnerability assessment is performed without any prior knowledge of the target environment?

Accepted Answer

Black Box Assessment

Answer

White Box Assessment

Answer

Gray Box Assessment

Answer

Crystal Box Assessment

Question 5

Which Metasploit component stores information about discovered hosts, services, and vulnerabilities during an engagement?

Accepted Answer

The Metasploit Database (msfdb)

Answer

msfconsole

Answer

msfvenom

Answer

Armitage

Question 6

What does CVSS stand for in the context of vulnerability scoring?

Accepted Answer

Common Vulnerability Scoring System

Answer

Common Vulnerability Severity System

Answer

Cyber Vulnerability Scoring Standard

Answer

Critical Vulnerability Summary Scale

What Practice Test Geeks adds beyond an AI chat for Certified Ethical Hacker