Ethical Hacker Security Flashcards
7 cards from real Certified Ethical Hacker practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Ethical Hacker Security flashcards as text
Which attack intercepts communication between two parties without their knowledge?
Answer: Man-in-the-middle
A man-in-the-middle attack secretly relays and possibly alters traffic between two endpoints.
What technique poisons a switch's CAM table to capture traffic on a LAN?
Answer: MAC flooding
MAC flooding overflows the CAM table, forcing the switch to broadcast frames like a hub.
Which encryption protocol is considered insecure for Wi-Fi and easily cracked?
Answer: WEP
WEP uses weak RC4 keying and is trivially cracked, making it obsolete.
A user receives a fraudulent email impersonating their bank to steal credentials. This is an example of:
Answer: Phishing
Phishing uses deceptive emails to trick victims into revealing sensitive information.
Which tool captures and analyzes network packets in real time?
Answer: Wireshark
Wireshark is a packet analyzer used to capture and inspect network traffic.
What does DNS cache poisoning achieve for an attacker?
Answer: Redirects users to malicious sites
DNS poisoning inserts false records so victims are redirected to attacker-controlled servers.
Which attack targets the human element rather than technical vulnerabilities?
Answer: Social engineering
Social engineering manipulates people into divulging information or performing actions.