Certified Ethical Hacker Ethical Hacker Methodology 2

Question 1

An ethical hacker reviews a target company's job postings, employee LinkedIn profiles, and DNS records without sending any packets to the target. Which phase and technique is this?

Accepted Answer

Passive reconnaissance

Answer

Gathering information from public sources without directly interacting with the target is passive reconnaissance.

Question 2

Which document is signed before an engagement begins to define what systems may be tested and the boundaries of the test?

Accepted Answer

Rules of Engagement

Answer

The Rules of Engagement defines scope, targets, timing, and limitations of the test.

Question 3

During scanning, a tester uses Nmap with the -sS flag. What type of scan is being performed?

Accepted Answer

SYN stealth scan

Answer

The -sS flag performs a half-open SYN stealth scan that does not complete the TCP handshake.

Question 4

What is the primary goal of the 'maintaining access' phase of the methodology?

Accepted Answer

Establish persistent access for return entry

Answer

Maintaining access focuses on creating persistence such as backdoors so the attacker can return.

Question 5

Which phase involves clearing logs and removing tools to avoid detection by defenders?

Accepted Answer

Covering tracks

Answer

Covering tracks (clearing tracks) removes evidence such as logs and artifacts to evade detection.

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Ethical Hacker Methodology 2