Introduction to Ethical Hacking

Which statement best describes ethical hacking in a professional cybersecurity context?

• Authorized simulations to assess security weaknesses

• Passive monitoring of network traffic for trends

• Unauthorized probing to find exploitable flaws

• Routine system maintenance and software updates

Which action best exemplifies spoofing in a cybersecurity context?

• Encrypting files to protect sensitive data

• Sending forged emails with a fake sender identity

• Flooding a server with excessive traffic requests

• Probing a host to discover open network ports

Which option best describes a back door in software security?

• An antivirus feature scanning for malware signatures

• A network firewall blocking unauthorized connections

• A hidden mechanism bypassing standard authentication

• An official login page requiring normal credentials

An attacker disguises malicious code inside a legitimate installer. What method of gaining access is being used?

• Trojan horse masquerading as trusted software

• Password guessing on the normal login screen

• Side channel attack exploiting timing leakage

• Back door left for debugging and diagnostics

Which example is a side-channel attack relying on indirect leakage from hardware behavior?

• Power analysis of CPU consumption to infer keys

• WiFi packet sniffing for session tokens

• Phishing with urgent password reset emails

• USB drop in office parking areas

To estimate an encryption key without breaking the algorithm directly, which method applies?

• Perform ARP spoofing to impersonate a gateway

• Measure encryption timing variations per operation

• Send spoofed emails requesting login credentials

• Leave infected USB drives in common areas

Which action best aligns with legal ethical hacking practice before conducting tests?

• Access a network without prior approval

• Search current laws and local regulations

• Install test malware on target systems

• Launch limited DoS to gauge resilience

Why must an ethical hacker know local law before testing systems?

• To avoid legal violations during engagements

• To improve processor performance benchmarking

• To comply with international maritime regulations

• To reduce network latency in data centers

You are hired by a company to test their security. They give you the Wi-Fi password, the network diagram, and the source code for their web app. What type of test is this?

• Black box

• White box

• Grey box

• Tier box

A hacker discovers a vulnerability in a bank's system. Instead of reporting it or stealing money, they fix the bug themselves without telling the bank. What hat are they wearing?

• white

• black

• grey

• red