Font size
WorksheetsEthical Hacking Workshop Exam
Total questions: 50
Worksheet time: 27mins
Which command is used to view file permissions in Linux?
cat
ls -l
chmod
touch
In the permission string -rw-r--r--, what does it represent?
Directory
File
Link
Executable
In Linux permissions, r stands for:
Write
Execute
Read
None of the above
In Linux permissions, w stands for:
Read
Write
Execute
None of the above
Which command is used to change file permissions?
chmod
chown
chperm
premset
In the permission string drwxr-xr-x, what does the initial d indicate?
Document
File
Deleted file
Directory
Which of the following gives the owner read and write permissions only?
-w-
r-x
-wx
rw-
A file shows permissions as -rwx------. This means:
Only group can execute
Everyone can execute
Only the owner has full permissions
No one can access the file
Which command is used to view hidden files in Linux?
ls -l
ls -a
ls
ls -R
In Linux permissions, e stands for:
Read
Write
Execute
None of the above
Which scan type is the default in Nmap?
UDP scan
SYN scan
TCP Connect scan
Ping scan
The flag -sV is used for:
Vulnerability scan
OS detection
Stealth scanning
Service version detection
Which flag scans all ports (1–65535)?
-p all
-p*
-p-
-A
The flag -sU in Nmap is used for:
UDP scan
SYN scan
Tcp Scan
None of the above
Which Nmap option runs all vulnerability scripts?
-sC
-sV
--script vuln
-Pn
Which Nmap option runs default NSE scripts?
-sC
-sV
---scrpt vuln
-Pn
The -oN flag means:
To save output into a file
To check OS
ping the target
The -Pn flag means:
Normal scan
Don’t ping the target
A SYN scan is used with which flag?
-sV
-sS
What does the flag -p22 do?
Scan only port 22 (SSH)
Scan 1-22 ports
What is reconnaissance in ethical hacking?
Breaking into a system
Covering tracks
Covering tracks
Gathering information about the target
What is gaining access in ethical hacking?
Breaking into a system
Gathering information about the target
Covering tracks
Which tool is used for subdomain enumeration?
sqlmap
subfinder
wpscan
hydra
robots.txt is used to:
Block search engine crawlers
Store passwords
What does WHOIS provide?
IP geolocation
Domain ownership details
SQL injection results
WordPress plugin data
Port 22 is used for:
SSH
FTP
Telnet
HTTP
Default Port 21 is used for:
Telnet
SSH
FTP
SMB
SMB enumeration can reveal:
SQL tables
Shared folders
WordPress themes
PHP errors
What is port numbers for SMB
139
443
445
3306
Which tool is used for directory scanning?
dirb / gobuster / feroxbuster
sqlmap
wpscan
Burp Suite
Which tool is used for zip file password cracking?
Hydra
JohnTheRipper (John)
Burpsuite
None of the above
Which command lists sudo rights?
sudo rights
sudo show
sudo -l
sudo su
/etc/shadow stores:
Encrypted passwords
Group information
Kernel logs
Network configs
WPScan is used for:
SQL injection
WordPress vulnerability scanning
Packet capture
DNS spoofing
Which file contains WordPress configuration settings?
wp-config.php
settings.json
WordPress default login page:
/wp-login.php
/panel
/index.php
What endpoint shows wordPress users?
?rest_route=/wp/v2/users
/wp-json/wp/v2/users
/wp-json
None of the above
SQL Injection is caused by:
Weak encryption
Improper input validation & sanitization
Directory listing
Missing plugins
SQLMap automates:
Nmap scans
WordPress scanning
SQL Injection exploitation
File inclusion attacks
Which parameter / flag shows the databases in SQLMap?
--dbs
--table
--dump
--columns
Which parameter / flag enables tables enumeration in SQLMap?
--dbs
--columns
--dump
--tables
What does UNION-based SQLi do?
Upload malware
Combine results of multiple SELECT queries
Bypass firewall
Spoof IP
XSS stands for:
Cross Side Security
Cross Site Scripting
Cross Software Security
Cross Site Spoofing
Which type of XSS requires a victim to click a link?
Stored
Reflected
DOM-based
Blind
XSS allows attackers to:
Modify databases
Scan ports
Modify kernel
Steal cookies
A common LFI payload is:
?file=../../etc/passwd
<script>alert()
UNION SELECT
None of the above
The purpose of ethical hacking is:
Harm systems
Steal data
Bypass exams
Helping Organizations by identifying vulnerabilities
Which of the following is an example of social engineering?
SQL injection
Asking an employee for their password by pretending to be IT support
Port scanning
Password Brute-Force
Which command starts Metasploit Framework console?
metasploit start
msfconsole
run metasploit
metasploit-cli
Which command is used to connect to an OpenVPN profile of TryHAckMe in Linux?
sudo vpn connect <file>
ovpn run <file>
connect vpn <file.ovpn>
sudo openvpn <file.ovpn>
