Certified Ethical Hacker Ethical Hacker Security 5

Question 1

Which tool is a widely used framework for developing and executing exploit code?

Accepted Answer

Metasploit

Answer

Metasploit is a penetration testing framework that bundles exploits, payloads, and modules.

Question 2

What is the purpose of privilege escalation after gaining initial access?

Accepted Answer

Gain higher-level permissions

Answer

Privilege escalation elevates an attacker's access from a low-privilege account to admin/root.

Question 3

Which password attack tries every possible character combination until success?

Accepted Answer

Brute-force attack

Answer

A brute-force attack systematically tries all possible combinations until the password is found.

Question 4

What does a rainbow table use to speed up password cracking?

Accepted Answer

Precomputed hash values

Answer

Rainbow tables store precomputed hashes so attackers can reverse them quickly.

Question 5

Which technique adds random data to a password before hashing to defeat rainbow tables?

Accepted Answer

Salting

Answer

Salting adds unique random data to each password so identical passwords hash differently.

Certified Ethical Hacker Practice Test