CREST Ethical Hacking & Penetration Testing

Question 1

What is penetration testing?

Accepted Answer

Simulating attacks on a system to identify vulnerabilities

Answer

A process to improve the hardware of a system.

Answer

A method for improving system performance.

Answer

A way to install antivirus software.

Question 2

Why is penetration testing essential for organizations?

Accepted Answer

Answer

It helps identify security weaknesses before they are exploited.

Answer

It ensures compliance with privacy laws.

Answer

It guarantees that no system failures will occur.

Answer

It optimizes network performance.

Question 3

What is the primary goal of ethical hacking?

Accepted Answer

To improve security by finding and fixing vulnerabilities

Answer

To harm a system.

Answer

To install harmful software.

Answer

To sell system weaknesses to hackers.

Question 4

What does a vulnerability assessment typically include?

Accepted Answer

Identifying and prioritizing vulnerabilities

Answer

Penetration testing only.

Answer

System maintenance and updates.

Answer

System performance improvement.

Question 5

What is the role of social engineering in ethical hacking?

Accepted Answer

It is used to manipulate individuals to gain system access

Answer

It involves attacking software systems.

Answer

It involves hardware tampering.

Answer

It is about optimizing system settings.

Question 6

What is a common tool used for penetration testing?

Accepted Answer

Metasploit and other exploitation frameworks

Answer

Only antivirus software.

Answer

Firewalls.

Answer

Web browsers.

Question 7

What is a common vulnerability discovered during penetration testing?

Accepted Answer

Outdated software and unpatched systems

Answer

Strong passwords.

Answer

Up-to-date firewalls.

Answer

Well-configured servers.

Question 8

What is the difference between white-hat and black-hat hackers?

Accepted Answer

White-hat hackers secure systems; black-hat hackers exploit them

Answer

White-hat hackers hack for profit.

Answer

Black-hat hackers work ethically.

Answer

There is no difference.

Question 9

What is the importance of reporting vulnerabilities after a penetration test?

Accepted Answer

It helps identify risks and prioritize remediation

Answer

It is optional and not necessary.

Answer

It only helps in selling security products.

Answer

It is only for legal purposes.