Cyber Security Ethical Hacking and Penetration Testing

Question 1

What is the first phase of a penetration testing engagement?

Accepted Answer

Reconnaissance

Answer

Reconnaissance is the first phase where the tester gathers information about the target before attacking.

Question 2

What distinguishes a white-box penetration test from a black-box test?

Accepted Answer

White-box testers have full knowledge of the target; black-box testers have none

Answer

In a white-box test, the tester has full knowledge of the target environment, simulating an insider threat or informed attacker.

Question 3

What document legally authorizes a penetration tester to perform testing activities on a client's systems?

Accepted Answer

Rules of Engagement (RoE) and Scope of Work

Answer

The Rules of Engagement and Scope of Work define what is authorized, limiting legal risk for the tester.

Question 4

Which tool is widely used for network scanning and host discovery during the reconnaissance phase?

Accepted Answer

Nmap

Answer

Nmap is the industry-standard tool for network discovery, port scanning, and service enumeration.

Question 5

What is privilege escalation in the context of ethical hacking?

Accepted Answer

Gaining higher-level permissions on a system after initial access

Answer

Privilege escalation involves exploiting vulnerabilities or misconfigurations to gain elevated permissions such as root or admin.

Cyber Security Practice Test