Certified Ethical Hacker Certified Ethical Hacker MCQ 3

Question 1

Which type of SQL injection relies on observing the response time of the database to infer data?

Accepted Answer

Time-based blind SQL injection

Answer

Time-based blind injection uses delay functions to infer true/false conditions from response times.

Question 2

What is the main goal of a session hijacking attack?

Accepted Answer

Take over an authenticated user's session

Answer

Session hijacking steals or predicts a valid session token to impersonate a legitimate user.

Question 3

Which wireless attack involves setting up a fraudulent access point that mimics a legitimate one?

Accepted Answer

Evil twin

Answer

An evil twin is a rogue AP impersonating a trusted network to capture user credentials.

Question 4

What does the term 'privilege escalation' refer to?

Accepted Answer

Gaining higher access rights than originally granted

Answer

Privilege escalation exploits flaws to obtain elevated permissions beyond the initial access level.

Question 5

Which hashing algorithm is considered cryptographically broken and should not be used for security?

Accepted Answer

MD5

Answer

MD5 is vulnerable to collision attacks and is unsuitable for security-sensitive hashing.

Certified Ethical Hacker Practice Test