Font size
WorksheetsHacker Academy - Ethical Hacking Quiz
Total questions: 100
Worksheet time: 2hrs 40mins
Maintaining access
Gaining access
Reconnaissance
Scanning
How many phases are there in hacking?
4
5
7
6
____________ is the information gathering phase in ethical hacking from the target user.
Reconnaissance
Scanning
Gaining access
Maintaining access
Which of the following is not a reconnaissance tool or technique for information gathering?
NMAP
Hping
whois lookup
Nexpose
There are ______ subtypes of reconnaissance.
2
3
4
5
Which of the following is an example of active reconnaissance?
Searching public records
Telephone calls as a help desk or fake customer care person
Looking for the target’s details in the database
Searching the target’s details in paper files
________________ is a component of the reconnaissance stage that is used to gather possible information for a target computer system or network.
Fingerprinting
3D printing
Footprinting
Data printing
Which of them is not an information source over the internet for target attackers?
Whois
Youtube
Nslookup
Nikto
Spywares can be used to steal _______________ from the attacker’s browser.
browsing history
company details
plug-ins used
browser details
Footprinting is used to collect information such as namespace, employee info, phone number and emails, job details.
True
False
https://whois.domaintools.com a popular site where one can enter a domain name in its search box for finding out how the site was looking at a given date.
True
False
Using spyware is an example of _________ type of information gathering.
active
passive
active & passive
non-passive
Collecting freely available information over the internet is an example of ____________ type of information gathering.
active
passive
active & passive
non-passive
53
80
434
443
How does a worm infect a computer?
E-mail attachments
Through security loopholes, your computer is not up to date
Suspicious web links
On memory sticks
Attack
Vulnerability
Threat
Exploit
Data Breach
Data infiltration
Information compromise
Data Hack
Scanning
Gaining access
Reconnaissance
Maintaining access
Hack
Attack
Offense
Exploit
File Scanner
Network Scanner
Code Scanner
Malware Scanner
Which of the following refers to someone who has a conviction?
Someone who has committed a crime
Someone who witnessed a crime
Someone who has been found guilty of a crime
Someone who is caught in the act of committing a crime
Two CDs containing details of the last 500 employee sickness records has gone missing. These CD's were not encrypted.
Which one of the following laws has been broken?
Police and Justice Act
Computer Misuse Act
Regulation of Investigatory Powers Act
Data Protection Act
Which one of the following is the name of the software that is designed to record every action which is typed with the aim of stealing sensitive data?
Trojan horse
Worm
Keylogger
Virus
Which one of the following defines the various programs used to communicate instructions to a computer and connected devices
Operating system software
Hardware devices
Office application software
Having a password that consists of a combination of letters, both uppercase and lowercase, numbers and symbols is known as which of the following?
Secure password
Solid password
Keylogger password
Trojan password
What does RIPA stand for?
Regulation of Investigatory Powers Act
Regulation of Information Powers Act
Regulation of Investigatory Protection Act
Recovery of Investigatory Powers Act
Recovery of Information Powers Act
Which of the following laws prevents unlawful and authorised interception of electronic communication?
Regulation of Investigatory Powers Act
Regulation of Investigation Act
Regulator of Investigation Powers Act
Regulating of Investigations Act
Hackers who engage in hacking for illegal purposes are known as which of the following?
Red hat hacker
Black hat hacker
Blue hat hacker
White hat hacker
Your personal device is infected with a keylogger.
Which of the following explains the meaning of this?
A small program designed to cause trouble by gaining access to your device. It can copy your personal data or slow your device down.
A person who tries to get into another persons device without consent.
It will gather the users activity such as internet browsing habits and could steal sensitive data.
Every action which is typed is recorded with the aim of stealing sensitive data.
Which one of the following laws extends police powers and grants the home office greater control over operational policing?
Police and Justice Act
Police and Home Office Act
Data Protection Act
Data Police Investigation Act
Your personal device is infected with spyware.
Which of the following explains the meaning of this?
It will gather users activity such as internet browsing habits and could steal sensitive information.
A person who gains remote control over another persons device without consent.
Files are altered or deleted without permission.
Every action which is typed is recorded with the aim of stealing sensitive data.
When paying for products online it is best to check the website starts with the protocol HTTPS and shows a padlock.
What is this known as?
Firewall
Security lab
Secure Socket Layer
Encryption
A banking managers laptop has been stolen from his car. The laptop contained information about personal bank accounts belonging to high profile people, that had not been encrypted.
Which one of the following laws has been broken?
None
Computer Misuse Act
Regulation of Investigatory Powers Act
Data Protection Act
Which of the following refers to someone who is the defendant?
The person who has committed a crime committed against them
The person who witnessed a crime
The lawyer who is defending a person in court
The person being accused of a crime
What is a worm?
A virus that replicates itself through computer networks
A virus that blocks device access until money is paid
A program that will remember your account details, such as name and login details, the next time you visit a website
Software the pretends to be a useful program but is actually carrying out hidden, harmful activity
What is a trojan horse?
A virus that replicates itself through computer networks
A virus that blocks device access until money is paid
A program that will remember your account details, such as name and login details, the next time you visit a website
Software the pretends to be a useful program but is actually carrying out hidden, harmful activity
What does GDPR stand for?
Great Danes Performance Ratings
General Data Protection Records
General Disclosure Protection Regulations
General Data Protection Regulation
Which law is broken if you buy a pirate copy of a DVD?
The Data Protection Act
The Copyright, Designs and Patents Act
Freedom of information Act
Computer Misuse Act
Code injection is a form of attack in which a malicious user:
Inserts text into a data field that gets interpreted as code
Gets the server to execute arbitrary code using a buffer overflow
Inserts additional code into the JavaScript running in the browser
Gains access to the codebase on the server and inserts new code
Sid is a judge for a programming contest. Before the code reaches him it goes through arestricted OS and is tested there. If it passes, then it moves onto Sid. What is this middle step called?
Fuzzy-testing the code
Third party running the code
Sandboxing the code
String validating the code
Which of the following act requires employer's standard national numbers to identify them onstandard transactions?
SOXIT
HIPAA
DMCA
PCI-DSS
Which of the following is an NMAP script that could help detect HTTP Methods such as GET,POST, HEAD, PUT, DELETE, TRACE?
http-git
http-headers
http enum
http-methods
What is the process of logging, recording, and resolving events that take place in anorganization?
Incident Management Process
Security Policy
Internal Procedure
Metrics
Ethical Hacking can be called as
White Hat Hacking
Black hat hacking
Attacking systems
none
How can you define coding ?
Code tells a computer what actions to take
sometimes called computer programming
Communication medium between user and computer
All Above
Which OS (Operating System) was used by MOHAN SIR in practical demonstration ?
Windows OO
Apple iOS
Kali Linux
Ubuntu OS
Do you think CODING is important for ethical hacking ?
YES
NO
Syntax of Python to execute simple blocks
print("Hello, World!")
Hello, World!
<Python> Hello world <?python>
$#(pt.r^*)@ pthon.
All are correct
Extension for python code file
.py
.ptn
.python
Name of the organization which provided you this FREE WORKSHOP ?
(a)
Ethical hacking is good to learn because..
The future needs more cyber experts
The future is computer world
Both
NONE
Is Python case sensitive when dealing with identifiers?
yes
no
machine dependent
none
What is the answer to this expression, 22 % 3 is?
7
1
0
5
Ransomware...
Erases all files in your computer
pops up images of cats on your screen
encrypts files in your computer and asks for money to decrypt them
changes your operative system's language and mocks you
I.O.T means...
Interweb of this
Internet on tanks
Internet over time
Internet of things
Reconnaissance is a passive stage during an attack
True
False
The first three phases of an attack in order are:
Scan, Recon, Exploit
Recon, Scan, Exploit
Exploit, Recon, Scan
Scan, Exploit, Recon
One of the most common O.S with lots of hacking tools is named
Kali
Hades
Shiva
Satan
The framework developed by the MITRE Corporation to assign scores to vulnerabilities is
VCSS
VCE
CVE
CVSS
Regarding the evolution of hacking
First hackers were motivated by the money.
Last phase is where APTs appeared.
Insiders can only perform low complexity attacks.
Crackers from second phase only use zero day attacks.
Regarding the different kinds of tests performed by ethical hackers to prevent their customers
Robots are pentesters and pirates are automated scans
Ninjas are Red Teamers and pirates are automated scans
Pentesters are pirates and Ninjas are Red teamers
Pentesters are zombies and Red teamers are warriors
The C.I.A triad stands for
Confidence, Intelligence, Agility
Central Intelligence Agency
Certified Internal Auditor
Confidentiality, Integrity, Avaliability
You need to have an IP address to be able to communicate using the internet
True
False
The first computer virus that spread all over the internet and caused important economic damages was
The Willis virus
The wannacry ransomware
The Morris Worm
The Bel Air Unicorn
The Ransomware problem is about to be solved by the industry. There are less and less attacks.
True
False
A social engineering attack where the attacker generates a fraudulent email, text, or websites to trick a victim into surrendering sensitive information.
Phishing
Malware
Ransomware
Viruses
Subversive use of computer systems to promote a political/social agenda.
Hacktivist
Industrial Spies
Nation State Hacker
Botnet
Which of the following do Cyber attackers commonly target for fetching IP address of a target or victim user?
ip tracker
emails
websites
webpages
Which of the following acts violate cybersecurity?
Exploit
Attack
Threat
Vulnerability
What is the weakest link in cybersecurity?
Weak encryption
Humans
Short passwords
Systems
Which method of hacking will record all your keystrokes?
Keyhijacking
Keyjacking
Keylogging
Keyboard Monitoring
The fullform of EDR is ______
Endpoint Detection and Recovery
Early Detection and Response
Endpoint Detection and Response
Endless Detection and Recovery
Which of the following is the hacking approach where cyber-criminals design fake websites or pages for tricking or gaining additional traffic?
Pharming
Website-Duplication
Mimicking
Spamming
Word "Cyberspace" was coined by _______
Richard Stallman
William Gibson
Andrew Tannenbaum
Scott Fahlman
An attacker, who is an employee of your firm may _______ to know your your system password.
Do peeping
Perform network jamming
Do shoulder surfing
Steal your laptop
Which of the following can diminish the chance of data leakage?
Steganography
Chorography
Cryptography
Authentication
Which of the following ethical hacking technique is used for determining which operating system (OS) is running on a remote computer?
Operating system fingerprinting
Operating system penetrating testing
Digital-printing
Machine printing
Site-to-Site VPN architecture is also known as ________
Remote connection based VPNs
Peer-to-Peer VPNs
Country-to-Country VPNs
Extranet based VPN
Network enumeration is a finding of _________ or devices on a network.
Hosts
Servers
Network Connection
Cloud Storage
Which of the following is the least strong security encryption standard?
WPA3
WPA2
WPA
WEP
Government hired some highly skilled hackers for providing cyber security for the country or state. These types of hackers are termed as _______.
Nation/State sponsored hackers
CIA triad
Special Hackers
Government Hackers
Which of the following information security technology is used for avoiding browser-based hacking?
Anti-malware in browsers
Remote browser access
Adware remover in browsers
Incognito mode in browser
What is Malware?
Bad computer equipment
Pop up adverts on your computer
Software designed to do harm to a computer
Fake web sites
Do you think that hacking is difficult?
yes
no
Ethical
Unethical
Ethical
Unethical
Ethical
Unethical
Ethical
Unethical
hardware firewalls are built in ______
computers
routers
networks
websites
we need to ______ our data
scan
secure
protect
safe keep
Phishing is cybercrime where an attacker sends emails that appear to be from a ______ source.
trusted
virus
known
phishing
