wayground logo

Free Printable Worksheets

NEW

Font size

S
M
L
XL
Worksheets

ceh 21

Total questions: 60

Worksheet time: 30mins

Name
Class
Date
1.
What is nslookup?
a)
Querying the Domain Name System (DNS) to get information about domain name
b)
Use for scanning ipv6
2.

Does Neo Trace provide good information about registration detail for the owner of each computer and the network of each node IP?

a)

No

b)

Yes

3.

What does VisualRoute integrates with other tools?

a)

Wireshark

b)

Angry IP

c)

Traceroute, ping and Whois

4.
Can NMAP scan UDP packet on host?
a)
Yes
b)
No
5.

Is this a sql injection statement “SELECT * FROM Users WHERE UserId = 105 OR 1=1” ?

a)

No

b)

Yes

6.

What is injected into Cross-Site Scripting?

a)

Virus

b)

Malicious scripts and codes

c)

sql statements

d)

Malware

7.

How to deploy DHCP filter type in Wireshark?

a)

.option.type

b)

Bootp.option.type == 53

8.
How does worm harm a computer?
a)
Consuming bandwidth
b)
Corrupt computer files
c)
Always restart computer
9.

What software tools can be use for DDoS execution?

a)

Cain and Abel

b)

L0phtCrack

c)

Java SDK

10.

What packet is advisable to send dor DoS attack simulation?

a)

TCP

b)

UDP

c)

ARP

11.
What is the weakest encryption below?
a)
MD5
b)
SHA
c)
DES
12.

What is Dictionary Attack?

a)

In cryptography, a brute or exhaustive key search is a strategy that can in theory be used against any encrypted data by an attacker who is unable to take advantage of any weakness in an encryption system that would otherwise make his task easier

b)

An attempt to gain illicit access to a computer system by using a very large set of words to generate potential passwords

13.

What activities can a WebCopier be used?

a)

Just copy html files

b)

Phishing activities to perform an attack

c)

Exploit javascript codes

14.
What is the most important task for a ethical hacker?
a)
Get trained for cyber-law and prepared reports for security audits
b)
Join ethical working groups
c)
Attend seminars about Cyber-law
d)
Create incident forms and prepared reports for security audits
15.

Which of the following is an Android Malware?

a)

Pdfconverter

b)

Geinimi

c)

PokerGames

d)

MobileWord

16.
Does GEINIMI obfuscated code?
a)
Yes
b)
No
17.

Do you need to insert your own code for Android Malware creation?

a)

No

b)

Yes

18.
What is the name of the database that stores passwords in Android?
a)
webview.db
b)
mysqldb.sql
19.

What are the commands to decompile the apk files?

a)

Select * from password

b)

adb pull /data/app(or app-private)/hello.apk unzip hello.apk dex2jar classes.dex jdgui classes2jar.jar

c)

jar hello.apk

20.
Can you use Wireshark, Fiddler & Burp Suits to monitor traffic on Android?
a)
Yes
b)
No
21.
Is this the definition of a computer virus “Computer virus is a computer program that can copy itself and infect a computer without permission or knowledge of the user”?
a)
Yes
b)
No
22.

How does computer virus spread from one computer to another?

a)

While typing word documents

b)

When its host it taken to the uninfected computer, for instance by a user sending it over a network or the internet

c)

Sending files to print over the printer.

23.
Can a macro program be infected by virus?
a)
Yes
b)
No
24.
How does the source code virus work?
a)
By adding Trojan code to it
b)
By creating a website
25.
What is a malware?
a)
Is a software designed to infiltrate or damage a computer system without owner’s informed consent.
b)
A software shows advertisements on your computers
26.

What is spyware?

a)

Is a denial of service software

b)

Install secretly on a personel computer to intercept or take partial control over the user’s interaction with the computer, without the user’s informed consent

27.
What is RootKit?
a)
Is a computer virus which consists of a program designed to take fundamental control of a computer system, without authorization by the system’s owners
b)
Displays the windows password
28.

What is the approach to detect viruses?

a)

THE ACTIVE APPROACH

b)

THE HEURISTIC APPROACH

c)

THE SOFTWARE LIFE CYCLE APPROACH

29.
What is a MAC address?
a)
Media Access Control a unique id assigned to wireless Adapters and routers
b)
It is and IP address
30.

What is 802.11?

a)

It is a wireless card

b)

Is the wireless communication standard by IEEE.

31.

WIFI has how many modes?

a)

7

b)

3

c)

6

d)

1

32.
Is ARP a protocol?
a)
Yes
b)
No
33.

How to view Probe Frame?

a)

ping -all

b)

airmon-ng start wlan2

c)

airodump-ng mon0

34.

What are value of WEP key?

a)

WEP uses 1024 bit

b)

WEP uses 64, 128 and 256 bit (very rare) keys

c)

WEP uses 2048

35.
What is the flaw of WEP?
a)
RC4 is a stream cipher and same key should not to be used twice
b)
Uses DES encryption
36.

Does WEP uses open method authentication?

a)

No

b)

Yes

37.
What if WPA packet was tampered with?
a)
WPA will stop using the current keys and re-key
b)
shift back to wep keys
38.

Why WPA is difficult to crack?

a)

need to dictionary attack

b)

need to perform brute force on the handshake.

39.
Why WPA2 is recommended?
a)
We have to choose strong password in order to achieve good security
b)
Not detectable by Wireshark
40.

What is the weakness of WPA2?

a)

Wireshark can display the keys

b)

It is possible to crack WPA2 with very high chance of success. But it depends on the length and complexity of the password

c)

Uses 3 pair key system

41.

What is wireless active attack?

a)

sniffing the air for packets without sending any data to the ap or clients

b)

breaking the key while sending data to the a AP or client

42.
What is wireless passive attack?
a)
sniffing the air for packets without sending any data to the ap or clients
b)
breaking the key while sending data to the AP or client
43.

Is ARP Replay an attacking method?

a)

No

b)

Yes

44.
Is Aircrack-ng a tool to crack wireless security?
a)
Yes
b)
No
45.
Is Kismet a wireless tool for security?
a)
Yes
b)
No
46.

Is the UDP packet causing weakness to the wireless network?

a)

Yes

b)

No

47.
What is TKIP?
a)
Temporal Key Integrity Protocol
b)
Tempo Key Int Phase
48.

Why is Share Key less secure?

a)

Share key is less secure because it can be easily cracked by dictionary attacks

b)

Share key is less secure because it allows the attacker to get IVs using the challenge through response mechanism

49.
Which of the following is the way to avoid virus?
a)
Always remember to scan any removable hardware using anti-virus software before accessing it
b)
Uninstall the antivirus
c)
Use common passwords
50.

Which of the following shows signs of the computer infected with virus?

a)

Able to open MS word documents

b)

Change the length of executable (*.com/*.exe) files.

51.

What is Cluster Virus?

a)

A type of virus that edits the windows registry

b)

A type of virus that changes the DOS directory information so that directory entries point to the virus code instead of the actual program

52.
What is System Sector Virus?
a)
A type of virus that affects the DOS boot sector or the Master Boot Record
b)
A type of virus that hides in a MP3 file
53.
What is WhisperMonitor used for in Android?
a)
Is an Android App to monitor outgoing traffic
b)
Is an Android App to monitor ingoing traffic
54.
Can be apk file be decompiled?
a)
Yes
b)
No
55.

What does the GENIMI app do to the victim’s phone?

a)

Restart the phone

b)

Get the contact list of the victim

c)

Drain the phone battery

56.
Can GEINIMI identify IMEI & IMSI?
a)
Yes
b)
No
57.

Which of the following activities are not relevant for hackers to use Wireshark?

a)

Capturing usernames and passwords

b)

OS fingerprinting

c)

Network mapping

d)

Create new packet

58.
How to detect DoS (Denial-of-services) attack?
a)
Use Snort
b)
Use android sdk
c)
Use nmap
d)
Use angryip
59.

Can NMAP detect webserver details?

a)

No

b)

Yes

60.

What method does the hackers gain information from the system?

a)

Surf internet

b)

Active method

c)

Update OS patches

d)

Scan OS with antivirus