Certified Ethical Hacker Ethical Hacker Methodology 4

Question 1

During footprinting, which tool would best retrieve domain registration and ownership details?

Accepted Answer

WHOIS

Answer

WHOIS queries return domain registration, ownership, and contact information.

Question 2

A tester captures a service's response containing version and OS hints by connecting to an open port. This is called what?

Accepted Answer

Banner grabbing

Answer

Banner grabbing collects service banners that often reveal software versions and OS details.

Question 3

Why must an ethical hacker document every action and finding during an engagement?

Accepted Answer

For reproducibility, reporting, and legal accountability

Answer

Thorough documentation supports reproducible results, clear reporting, and legal accountability.

Question 4

Which of these is an example of active reconnaissance?

Accepted Answer

Performing a port scan against the target

Answer

Port scanning directly interacts with the target, making it active reconnaissance.

Question 5

What is the main purpose of the final reporting phase of a penetration test?

Accepted Answer

To deliver findings, risk ratings, and remediation guidance

Answer

The reporting phase communicates findings, risk severity, and recommended remediation to the client.

Certified Ethical Hacker Practice Test