NEW
Font size
WorksheetsCybersecurity Quiz
Total questions: 39
Worksheet time: 20mins
You want to gather information about a target without touching its network. Which action fits this requirement?
nmap -sS target
ping target
Google dorking
traceroute target
A tester uses Netcraft instead of Nmap in the recon phase because Netcraft is:
Faster
Active
Passive
Exploit-based
A DNS zone transfer attempt uses which command?
dig ns example.com
dig axfr example.com
whois example.com
nslookup set=mx
If AXFR fails, it MOST LIKELY indicates:
DNS server is down
Zone transfers are restricted
No DNS records exist
Firewall blocking port 80
Which scan is MOST stealthy and does not complete TCP handshake?
TCP Connect scan
SYN scan
FIN scan
UDP scan
XMAS scan sends packets with:
SYN flag
ACK flag
FIN, PSH, URG
FIN only
An XMAS scan reports no response. The port state is interpreted as:
Open
Closed
Filtered or open
Listening
Idle scan requires a “zombie” system because it:
Generates traffic
Spoofs attacker IP
Uses predictable IPID
Performs scanning itself
Which command performs banner grabbing on HTTP?
nc -z target 80
telnet target 80
ping target
ftp target
Banner grabbing is useful mainly for identifying:
Open ports
Service versions
Vulnerabilities
Passwords
Enumeration differs from scanning because it:
Is passive
Identifies live hosts
Extracts detailed information
Finds vulnerabilities
Which protocol leaks credentials in plaintext by design?
HTTPS
FTP
SSH
SFTP
Passive sniffing FAILS in switched networks because:
Switch encrypts traffic
Traffic is unicast
MAC addresses are hidden
ARP is disabled
ARP poisoning is used to perform:
DoS
MITM
Port scanning
Brute force
MAC flooding targets which internal structure of a switch?
Routing table
ARP cache
CAM table
NAT table
Which malware spreads without user interaction?
Trojan
Virus
Worm
Rootkit
A Trojan is MOST accurately described as:
Self-replicating
Hidden kernel malware
Malicious software disguised as legitimate
Network-based attack
Reverse-connecting Trojans are effective because they:
Use UDP
Avoid outbound firewall rules
Bypass inbound firewall rules
Run as root
System File Verification tools (like Tripwire) are used to detect:
Sniffing
Rootkits
File integrity changes
Network attacks
Smurf attack abuses:
TCP handshake
ICMP broadcast
DNS recursion
UDP reflection
SYN flood exhausts:
Bandwidth
CPU
Half-open connections
Disk space
Session hijacking is easiest when:
HTTPS is used
Session IDs are predictable
IDS is enabled
Firewall exists
WEP is insecure mainly due to:
Short keys
Weak IV reuse
No authentication
MAC filtering
Deauthentication attack operates at:
Layer 1
Layer 2
Layer 3
Layer 7
Evil Twin attack involves:
Fake client
Fake AP
Fake DNS
Fake IP
IDS differs from IPS because IDS:
Blocks traffic
Modifies packets
Generates alerts
Drops sessions
Signature-based IDS fails against:
Known attacks
Port scans
Zero-day attacks
Brute force
Application proxy firewall operates at:
Layer 3
Layer 4
Layer 5
Layer 7
Primary legal concern of honeypots is:
Malware hosting
Entrapment
Data leakage
IDS evasion
ADB is primarily used for:
Reverse engineering
Device debugging
Packet sniffing
Malware creation
Android sandboxing is enforced by:
Dalvik
Application permissions
Linux UID model
Google Play
Which phase defines scope and legal permission?
Reconnaissance
Scanning
Planning
Exploitation
Pen-testing differs from vulnerability scanning because it:
Uses tools
Is automated
Actively exploits
Generates reports
Most real-world successful attacks begin with:
Zero-day exploit
SQL injection
Social engineering
Buffer overflow
A firewall alone cannot prevent:
DoS
Malware execution
Port scanning
IP spoofing
False Positive means:
Attack exists, not detected
No attack, detected
Attack exists, detected
No attack, not detected
Best defense against Trojan installation is:
Firewall
IDS
User awareness
Honeypot
Covering tracks mainly involves:
Exploitation
Clearing logs
Privilege escalation
Enumeration
CCE exams prefer questions that test:
Tool syntax
Definitions
Conceptual clarity
Memory
