Cybersecurity Workshop

In ethical hacking, which of the following activities is not part of the reconnaissance phase?

• Gathering subdomain information using OSINT tools

• Scanning open ports on the target system

• Checking data breaches using HaveIBeenPwned

• Identifying technologies used on a website with Wappalyzer

The tool HaveIBeenPwned is primarily used to:

• Scan for malware in an infected system

• Check if email credentials have been exposed in data breaches

• Test network packet loss

• Identify open ports on a web server

In the 5 phases of ethical hacking, the step “Maintaining Access” refers to:

• Creating a backdoor or persistence method after gaining entry

• Gathering initial system information

• Installing antivirus to protect the system

• Scanning network firewalls

Which of the following OSINT tools can be used to view historical versions of a website?

• Netcraft

• Wayback Machine

• Wappalyzer

• Shodan

The difference between active and passive reconnaissance is that:

• Passive methods involve direct interaction with the target

• Active methods rely on open-source intelligence only

• Active reconnaissance can alert the target due to direct probing

• Passive reconnaissance is illegal in all cases

What does Wappalyzer help a cybersecurity professional identify?

• The operating system of a target host

• The technologies and frameworks used by a website

• IP address location

• Email server vulnerabilities

Which of the following combinations correctly lists ethical hacking phases in order?

• Scanning → Reconnaissance → Gaining Access → Maintaining Access → Covering Tracks

• Reconnaissance → Scanning → Gaining Access → Maintaining Access → Covering Tracks

• Gaining Access → Scanning → Reconnaissance → Covering Tracks → Maintaining Access

• Reconnaissance → Gaining Access → Scanning → Covering Tracks → Maintaining Access

The Live Cyber Threat Map is mainly used for:

• Real-time visualization of global cyber attacks

• Finding open ports

• Tracking personal data leaks

• Testing phishing emails

Which of these tools is a vulnerable web application designed for practice in web security testing?

• Netcraft

• DVWA

• HaveIBeenPwned

• OSINT Framework

In Kali Linux, Zphisher is primarily used for :

• Performing password cracking

• Creating phishing pages to simulate credential theft

• Identifying Web server vulnerabilities

• Monitoring real-time threats