Certified Ethical Hacker Certified Ethical Hacker MCQ 3

Question 1

Which type of SQL injection relies on observing the response time of the database to infer data?

Accepted Answer

Time-based blind SQL injection

Answer

Union-based SQL injection

Answer

Error-based SQL injection

Answer

In-band SQL injection

Question 2

What is the main goal of a session hijacking attack?

Accepted Answer

Take over an authenticated user's session

Answer

Crack a password hash

Answer

Flood a server with requests

Answer

Intercept DNS queries

Question 3

Which wireless attack involves setting up a fraudulent access point that mimics a legitimate one?

Accepted Answer

Evil twin

Answer

Deauthentication

Answer

WPS PIN attack

Answer

Bluejacking

Question 4

What does the term 'privilege escalation' refer to?

Accepted Answer

Gaining higher access rights than originally granted

Answer

Encrypting files for ransom

Answer

Scanning for open ports

Answer

Spoofing a MAC address

Question 5

Which hashing algorithm is considered cryptographically broken and should not be used for security?

Accepted Answer

MD5

Answer

SHA-256

Answer

SHA-3

Answer

bcrypt

Question 6

In a penetration test, what document defines the scope and legal authorization for the engagement?

Accepted Answer

Rules of Engagement

Answer

Service Level Agreement

Answer

Acceptable Use Policy

Answer

Incident Response Plan

Question 7

What technique encodes a malicious payload to evade signature-based intrusion detection systems?

Accepted Answer

Obfuscation

Answer

Footprinting

Answer

Enumeration

Answer

Sniffing