Certified Ethical Hacker Ethical Hacker Security 3

Question 1

Which attack intercepts communication between two parties without their knowledge?

Accepted Answer

Man-in-the-middle

Answer

A man-in-the-middle attack secretly relays and possibly alters traffic between two endpoints.

Question 2

What technique poisons a switch's CAM table to capture traffic on a LAN?

Accepted Answer

MAC flooding

Answer

MAC flooding overflows the CAM table, forcing the switch to broadcast frames like a hub.

Question 3

Which encryption protocol is considered insecure for Wi-Fi and easily cracked?

Accepted Answer

WEP

Answer

WEP uses weak RC4 keying and is trivially cracked, making it obsolete.

Question 4

A user receives a fraudulent email impersonating their bank to steal credentials. This is an example of:

Accepted Answer

Phishing

Answer

Phishing uses deceptive emails to trick victims into revealing sensitive information.

Question 5

Which tool captures and analyzes network packets in real time?

Accepted Answer

Wireshark

Answer

Wireshark is a packet analyzer used to capture and inspect network traffic.

Certified Ethical Hacker Practice Test