Ethical Hacking Practice Quiz

What does the -A option in Nmap do?

• Scans only UDP ports

• Aggressive scan: detects OS, version, and runs scripts

• Enables ARP scan

• Avoids detection by IDS

Which tool is used to discover hidden directories on a web server?

• Nmap

• SQLmap

• DIRB

• Burp Suite

What is the default shell payload used in Metasploit for reverse connections?

• windows/reverse_http

• shell_bind_tcp

• windows/meterpreter/reverse_tcp

• meterpreter_bind_tcp

Which of the following is an example of passive information gathering?

• Scanning with Nmap

• Sending a phishing email

• Searching WHOIS records

• Running DIRB

What does SQL Injection (SQLi) allow an attacker to do?

• Perform DoS attacks

• Inject HTML into the site

• Modify or retrieve database contents

• Execute JavaScript in browser

What is the purpose of the command set RHOST in Metasploit?

• To set the attacker's IP address

• To load a payload

• To specify the target machine's IP

• To list active sessions

Which type of shell allows the attacker to connect to a victims open port?

• Reverse Shell

• Persistent Shell

• Bind Shell

• Meterpreter Shell

What is CVE?

• Common Vulnerability Evaluation

• Certified Vulnerability Engine

• Common Vulnerabilities and Exposures

• Cybersecurity Validation Engine

Which Burp Suite feature allows interception and modification of web traffic?

• Repeater

• Interceptor

• Scanner

• Spider

What is the main purpose of post-exploitation?

• To brute force passwords

• To report vulnerabilities

• To maintain access and gather data

• To scan open ports