Certified Ethical Hacker Certified Ethical Hacker MCQ 2

Question 1

During the reconnaissance phase, which technique gathers information without directly interacting with the target system?

Accepted Answer

Passive reconnaissance

Answer

Passive reconnaissance collects information from public sources without sending packets to the target.

Question 2

Which tool is most commonly used to perform OS fingerprinting through TCP/IP stack analysis?

Accepted Answer

Nmap

Answer

Nmap analyzes TCP/IP stack responses to determine the target operating system.

Question 3

What does the acronym DMZ stand for in network security?

Accepted Answer

Demilitarized Zone

Answer

A DMZ is a perimeter network that exposes external-facing services while protecting the internal LAN.

Question 4

An attacker sends an ICMP echo request to a broadcast address with a spoofed source. What attack is this?

Accepted Answer

Smurf attack

Answer

A Smurf attack amplifies traffic by broadcasting ICMP requests with the victim's spoofed source address.

Question 5

Which of the following is a valid countermeasure against ARP spoofing?

Accepted Answer

Dynamic ARP Inspection

Answer

Dynamic ARP Inspection validates ARP packets against a trusted DHCP binding table.

Certified Ethical Hacker Practice Test