CEHv8 BOOTCAMP: MODULE 01-INTRODUCTION TO ETHICAL HACKING_SET-2

Question 1

What are Black Hats?

Answer 1

Individuals with extraordinary computing skills, resorting to malicious or destructive activities and are also known as crackers.

Question 2

What are White Hats?

Answer 2

Individuals professing hacker skills and using them for defensive purposes and are also known as security analysts.

Question 3

What are Gray Hats?

Answer 3

Individuals who work both offensively and defensively at various times.

Question 4

What are Suicide Hackers?

Answer 4

Individuals who aim to bring down critical infrastructure for a “cause” and are not worried about facing jail terms, or any other form of punishment.

Question 5

What are Script Kiddies?

Answer 5

An unskilled hacker who compromises system by running scripts, tools, and software developed by real hackers.

Question 6

What are Spy Hackers?

Answer 6

Individuals employed by the organization to penetrate and gain trade secrets of the competitor.

Question 7

What are Cyber Terrorists?

Answer 7

Individuals with wide range of skills, motivated by religious or political beliefs to create fear by large scale disruption of computer networks.

Question 8

What are State Sponsored Hackers?

Answer 8

Individuals employed by the government to penetrate and gain top-secret information and to damage information systems of other governments.

Question 9

What is Passive Reconnaissance?

Answer 9

Acquiring information without directly interacting with the target.

Question 10

What is Active Reconnaissance?

Answer 10

Acquiring information by directly interacting with the target, by any means.

Question 11

What does Reconnaissance refer to in the phases of hacking?

Answer 11

The preparatory phase where an attacker seeks to gather information about a target prior to launching an attack.

Question 12

What are some types of tools used during the Scanning phase of hacking?

Answer 12

• Dialers
• Port scanners
• Network mappers
• Ping tools
• Vulnerability scanners

Question 13

What does Scanning refer to in the phases of hacking?

Answer 13

The pre-attack phase when the attacker scans the network for specific information on the basis of information gathering during reconnaissance.

Question 14

What does Gaining Access refer to in the phases of hacking?

Answer 14

The point where the attacker obtains access to the operating system or applications on the computer or network.

Question 15

What does Maintaining Access refer to in the phases of hacking?

Answer 15

When the attacker tries to retain his or her ownership of the system.

Question 16

What does Clearing Tracks refer to in the phases of hacking?

Answer 16

The activities taken by an attacker to hide malicious acts.

Question 17

How can attackers Maintain Access?

Answer 17

By securing their exclusive access with Backdoors, RootKits, or Trojans.

Question 18

How can an attacker clear their tracks?

Answer 18

Overwriting server, system and application logs to avoid suspicion.

Question 19

What are some OS vulnerabilities?

Answer 19

• Buffer overflow vulnerabilities
• Bugs in the OS
• Unpatched OS

Question 20

What are some OS attacks?

Answer 20

• Exploiting specific protocol implementations
• Attacking built-in authentication systems
• Breaking file-system security
• Cracking passwords and encryption mechanisms

Question 21

What can poor or nonexistent error checking in applications lead to?

Answer 21

• Buffer overflow attacks
• Sensitive information disclosure
• Cross-site scripting
• Session hijacking and a man-in-the-middle attacks
• SQL injection attacks
• Denial-of-service attacks

Question 22

What are types of application-level attacks?

Answer 22

• Phishing
• Session hijacking
• Man-in-the-middle attack
• Parameter/form tampering
• Directory traversal attacks

Question 23

What are Shrink Wrap Code attacks?

Answer 23

Attacks that exploit default configuration and settings of the off-the-shelf libraries and code.

Question 24

What are the 5 skills of an Ethical Hacker?

Answer 24

• Platform Knowledge
• Network Knowledge
• Computer Expert
• Security Knowledge
• Technical Knowledge

Question 25

What is Defense in Depth?

Answer 25

A security strategy in which several protection layers are placed throughout an information system.