Cyber Security Ethical Hacking and Penetration Testing

Question 1

What is the first phase of a penetration testing engagement?

Accepted Answer

Reconnaissance

Answer

Exploitation

Answer

Reporting

Answer

Post-exploitation

Question 2

What distinguishes a white-box penetration test from a black-box test?

Accepted Answer

White-box testers have full knowledge of the target; black-box testers have none

Answer

White-box testers have no prior knowledge; black-box testers have full knowledge

Answer

White-box tests are automated; black-box tests are manual

Answer

Black-box tests require physical access; white-box tests do not

Question 3

What document legally authorizes a penetration tester to perform testing activities on a client's systems?

Accepted Answer

Rules of Engagement (RoE) and Scope of Work

Answer

Non-Disclosure Agreement (NDA)

Answer

Vulnerability Assessment Report

Answer

Statement of Health (SoH)

Question 4

Which tool is widely used for network scanning and host discovery during the reconnaissance phase?

Accepted Answer

Nmap

Answer

Wireshark

Answer

Metasploit

Answer

John the Ripper

Question 5

What is privilege escalation in the context of ethical hacking?

Accepted Answer

Gaining higher-level permissions on a system after initial access

Answer

Gaining initial access to a system

Answer

Exfiltrating data from a compromised host

Answer

Covering tracks by deleting logs

Question 6

Which phase of penetration testing involves documenting findings and providing remediation recommendations?

Accepted Answer

Reporting

Answer

Exploitation

Answer

Reconnaissance

Answer

Lateral movement