Ethical Hacking Review Quiz

Which establishment needs to be HIPAA certified?

• Hospitals

• Shops

• Credit card companies

• Banks

Why may cookies be stolen via XSS?

• To steal another user's session.

• To inject malware to the client.

• To deprive the server of data.

• To steal another user's ID.

Which of the following is true regarding an SFX attack? Choose all correct answers.

• SFX are self-extracting executables.

• SFX can be used to deceive a victim into running background executables and scripts.

• SFX icons cannot be changed.

• All files extracted via SFX are visible.

Which of the following is true about Hashcat?

• Hashcat can use the GPU as the processing unit for brute-force attacks.

• Hashcat is considered outdated and old.

• Hashcat can only perform brute-force using rainbow tables.

• Hashcat can perform fast online brute-force attacks.

What does Talos do?

• Gathers global information about cyber attacks

• Alerts the police if it detects suspicious network behavior

• Detects all illegal traffic in an internal network

• Collects food recipes

Which of the following is the BEST way to mitigate unwanted pre-boot access to a Windows machine?

• Full disk encryption

• Table lock

• BIOS password

• Implementing password complexity

Which SQL Injection attack is the easiest to perform?

• User SQL Injection

• Blind SQL Injection

• Time-based blind SQL Injection

• Error-based SQL Injection

Which of the following is a type of SQL injection that does not show error messages?

• Blind SQLi

• Error based SQLi

• User based SQLi

• Time based SQLi

Which of the following needs to be in the GRUB to run a terminal with root permissions?

• 'rw initrd=/install/gtk/initrd.gz quiet splash init=/bin/bash', to have read-write permissions.

• 'ro initrd=/bin/bash', to run the Bash terminal as root.

• 'rw initrd=/bin/bash', to run /bin/bash as root with read-write permissions.

• 'rw init=/install/initrd.gz', to run the correct image of the Linux system with read-write permissions.

Which of the following does an ethical hacker require to start evaluating a system?

• Permission

• Planning

• Nothing

• Training