Certified Ethical Hacker Network Security and Scanning 3

Question 1

Which scanning technique uses banner grabbing to gather information?

Accepted Answer

Connecting to a service to read its response header

Answer

Banner grabbing connects to a service (e.g., via Telnet or netcat) to read identifying header text.

Question 2

Why is a UDP scan generally slower and less reliable than a TCP scan?

Accepted Answer

UDP is connectionless and open ports often send no response

Answer

UDP is connectionless, so open ports frequently stay silent, forcing slow timeout-based inference.

Question 3

What is the main goal of network enumeration after scanning?

Accepted Answer

To extract usernames, shares, and services from identified hosts

Answer

Enumeration actively extracts resources like usernames, shares, and services from discovered systems.

Question 4

Which tool is commonly used to capture and analyze network packets?

Accepted Answer

Wireshark

Answer

Wireshark is a packet capture and protocol analyzer used to inspect network traffic.

Question 5

An attacker performs a DNS zone transfer (AXFR). What is the risk if it succeeds?

Accepted Answer

The full list of DNS records for the domain is exposed

Answer

A successful zone transfer hands over the complete DNS records, revealing internal hostnames and structure.

Certified Ethical Hacker Practice Test