Why is it important to scan your target network slowly?

You are the senior manager in the IT department for your company. What is the most cost effective way to prevent social engineering attacks?

In which phase within the ethical hacking framework do you alter or delete log information?

A hacker is conducting the following on the target workstation: nmap --sT 192.33.10.5. The attacker is in which phase?

What does a SYN scan accomplish?

In which phase is an attacker who is currently conducting a successful man-in-the-middle attack?

What is the default TTL values for Microsoft Windows 7 OS?

As a penetration tester, only you and a few key selected individuals from the company will know of the targeted network that will be tested. You also have zero knowledge of your target other than the name and location of the company. What type of assessment is this called?

As an attacker, you found your target. You spend the next two weeks observing and watching personnel move in and move out of the facility. You also observe how the front desk handles large packages that are delivered as well as people who do not have access badges. You finally come up with a solid schedule of security patrols that you see being conducted. What is it that you are doing?

Which scanning tool is more likely going to yield accurate results for the hacker?

Which password is more secure?

You are sitting inside of your office and you notice a strange person in the parking lot with what appears to be a tall antenna connected to a laptop. What is the stranger most likely doing?

Which of following actions is the last step in scanning a target?

Of the following methods, which one acts as a middleman between an external network and the private network by initiating and establishing the connection?

What default port does SSH utilize?

As a pentester, you are hired to conduct an assessment on a group of systems for your client. You are provided with a list of critical assets, a list of domain controllers, and a list of virtual share drives. Nothing else was provided. What type of test are you conducting?

What is the role of an individual who interrogates a system with permission?

What port is used by DNS?

Which operating system build provides a suite of tools for network defense purposes?

Which operating system build provides a suite of tools for network offensive (attack your target) purposes?

A network of zombie computers used to execute a DDoS on a target system is called?

Which of the following is used for recording key strokes at a terminal or keyboard using malicious software?

Software that creates pop-up advertisement messages while visiting websites is known as what?

The ability for information or services that must be accessible at a moment's notice is called what?

A device that facilitates connections and acts as a middleman between a trusted zone and an untrusted zone is referred to as what?

As a black hat, you are conducting a reconnaissance operation on a potential target. You gather intelligence by using publicly available information, conducting stakeouts of the facility, and observing workers as they enter and leave the premises from across the street. What phase of the hacking methodologies are you operating within?

As a black hat, you forge an identification badge and dress in clothes associated with a maintenance worker. You attempt to follow other maintenance personnel as they enter the power grid facility. What are you attempting to do?

Chris decides to download some music from a website while at work. When he opens the music files, a pop-up notification informs Chris that he must send $600 US dollars to a PayPal account using the email address Shoju@scorpion.ru if he wants access to his system again. What do you think Chris may have installed?

Which term best describes the absence or weakness of a safeguard related to an asset?

As a black hat, you use ToneLoc to dial random numbers in order to connect to a modem that is providing service to a server. What type of attack are you conducting?

As a white hat, your customer asks what type of assessments you can conduct. What are they?

When a black hat is querying for a number of services or login information on a target system, what are they trying to accomplish?

Which of the following allows the adversary to obtain passwords online in a passive manner?

What is accomplished by a combination of ping sweeping and enumerating a target?

Which switch in Nmap allows for a full TCP connect scan?

As a black hat, you call into the city manager's office claiming to be a part of the help desk team. You ask the clerk for her username and password to install the latest Microsoft Office suite. What type of attack are you conducting?

Which of the following applications is used to inspect packets?

How would an administrator set a password for a user in Linux?

Which is the second phase in the ethical hacking methodology?

Your company has been targeted by a series of phishing emails. In order to deter the attack, you quickly tell your users to verify senders. How do you go about implementing this?

A user side-loaded a popular app from an unauthorized third-party app store. When the user installed the app, it displayed a screen asking for payment and stating that if the payment was not received, the user would lose all access to data that was stored on their phone. What was installed on the user’s phone?

Which of the following is considered open-source information?

Which of the following tools allows a user to monitor network activity?

What is the default command port for FTP?

Which of the following has no flags set and does not respond if a port is open?

To establish a TCP connection, what must be sent first?

Which is the last step of the CEH hacking methodology?

Which of the following is a malware that does not need a host or human interaction to disrupt and corrupt data?

What is the main purpose of installing a Trojan?