Certified Ethical Hacker Certified Ethical Hacker MCQ 2 — Questions and Answers
Question 1: During the reconnaissance phase, which technique gathers information without directly interacting with the target system?
- Passive reconnaissance (Correct answer)
- Active scanning
- Banner grabbing
- Vulnerability scanning
Correct answer: Passive reconnaissance
Passive reconnaissance collects information from public sources without sending packets to the target.
Question 2: Which tool is most commonly used to perform OS fingerprinting through TCP/IP stack analysis?
- Nmap (Correct answer)
- Wireshark
- John the Ripper
- Metasploit
Correct answer: Nmap
Nmap analyzes TCP/IP stack responses to determine the target operating system.
Question 3: What does the acronym DMZ stand for in network security?
- Demilitarized Zone (Correct answer)
- Data Management Zone
- Domain Management Zone
- Dynamic Memory Zone
Correct answer: Demilitarized Zone
A DMZ is a perimeter network that exposes external-facing services while protecting the internal LAN.
Question 4: An attacker sends an ICMP echo request to a broadcast address with a spoofed source. What attack is this?
- Smurf attack (Correct answer)
- SYN flood
- Teardrop attack
- Ping of death
Correct answer: Smurf attack
A Smurf attack amplifies traffic by broadcasting ICMP requests with the victim's spoofed source address.
Question 5: Which of the following is a valid countermeasure against ARP spoofing?
- Dynamic ARP Inspection (Correct answer)
- Disabling ICMP
- Port knocking
- MAC flooding
Correct answer: Dynamic ARP Inspection
Dynamic ARP Inspection validates ARP packets against a trusted DHCP binding table.
Question 6: What is the primary purpose of a honeypot in an organization's security posture?
- To lure and detect attackers (Correct answer)
- To encrypt sensitive data
- To balance network load
- To filter spam emails
Correct answer: To lure and detect attackers
A honeypot is a decoy system designed to attract attackers and study their methods.
Question 7: In cryptography, which property ensures that a sender cannot deny having sent a message?
- Non-repudiation (Correct answer)
- Confidentiality
- Availability
- Integrity
Correct answer: Non-repudiation
Non-repudiation provides proof of origin, preventing the sender from denying authorship.
Certified Ethical Hacker Certified Ethical Hacker MCQ 2
During the reconnaissance phase, which technique gathers information without directly interacting with the target system?