Certified Ethical Hacker Ethical Hacker Methodology 3

Question 1

Which type of penetration test gives the tester full knowledge of the network, including architecture diagrams and source code?

Accepted Answer

White-box testing

Answer

White-box testing provides the tester with complete internal knowledge of the target.

Question 2

In a black-box engagement, what does the tester start with?

Accepted Answer

Little to no prior knowledge of the target

Answer

Black-box testing simulates an outside attacker with no prior internal knowledge.

Question 3

What is the correct ordered sequence of the CEH hacking phases?

Accepted Answer

Recon, Scanning, Gaining access, Maintaining access, Covering tracks

Answer

The standard sequence is reconnaissance, scanning, gaining access, maintaining access, then covering tracks.

Question 4

A tester uses Google search operators like 'site:' and 'filetype:' to find exposed documents. This technique is called what?

Accepted Answer

Google dorking

Answer

Using advanced search operators to find sensitive exposed data is known as Google dorking.

Question 5

Which methodology framework is a widely used standard for structuring penetration tests?

Accepted Answer

PTES (Penetration Testing Execution Standard)

Answer

PTES defines a standard structure for conducting penetration tests across phases.

Certified Ethical Hacker Practice Test