Certified Ethical Hacker Vulnerability Assessment and Exploitation 2

Question 1

Which exploitation phase in CEH involves maintaining access to a compromised system for future use?

Accepted Answer

Maintaining Access

Answer

The Maintaining Access phase involves installing backdoors, rootkits, or Trojans to ensure persistent access to the compromised system for later use.

Question 2

What is a 'zero-day vulnerability'?

Accepted Answer

A previously unknown vulnerability with no available patch

Answer

A zero-day vulnerability is a security flaw that is unknown to the vendor and has no available patch, making it particularly dangerous and valuable to attackers.

Question 3

Which Metasploit payload type creates a connection from the target back to the attacker's machine?

Accepted Answer

Reverse Shell

Answer

A reverse shell payload causes the target machine to initiate a connection back to the attacker, often bypassing inbound firewall rules that block incoming connections.

Question 4

What is the purpose of 'fuzzing' in vulnerability research?

Accepted Answer

Sending malformed or random data to an application to discover crashes and bugs

Answer

Fuzzing (fuzz testing) inputs large volumes of random or malformed data into an application to trigger unexpected behavior, crashes, or security vulnerabilities.

Question 5

Which type of exploit takes advantage of a buffer overflow to overwrite the return address and redirect execution flow?

Accepted Answer

Stack-Based Buffer Overflow

Answer

A stack-based buffer overflow writes beyond a buffer's bounds on the stack, overwriting the return address with an attacker-controlled value to redirect code execution.

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Practice Test

Certified Ethical Hacker Vulnerability Assessment and Exploitation 2