Certified Ethical Hacker Ethical Hacker Security 2

Question 1

Which phase of ethical hacking involves actively probing a target to find open ports and live hosts?

Accepted Answer

Scanning

Answer

Scanning actively probes the target to discover live hosts, open ports, and services.

Question 2

A penetration tester is given no prior knowledge of the target environment. What type of test is this?

Accepted Answer

Black-box

Answer

Black-box testing simulates an external attacker with zero internal knowledge of the system.

Question 3

Which tool is most commonly used for network discovery and port scanning?

Accepted Answer

Nmap

Answer

Nmap is the standard tool for host discovery, port scanning, and service/version detection.

Question 4

What does a TCP SYN scan rely on to avoid completing the full handshake?

Accepted Answer

Sending RST after SYN-ACK

Answer

A SYN scan sends a RST after receiving SYN-ACK, never completing the three-way handshake (half-open scan).

Question 5

Which document legally authorizes a penetration test and defines its scope?

Accepted Answer

Rules of Engagement

Answer

The Rules of Engagement document defines scope, timing, and authorized actions for a test.

Certified Ethical Hacker Practice Test