Ethical Hacking

Question 1

What is Ethical Hacking?

Answer 1

An authorised attempt to gain unauthorised access to a computer system, application or data.

Question 2

What does the term “Cracker” Mean?

Answer 2

A hacker who uses their skills and toolset for destructive or offensive purposes.

Question 3

What is the purpose of a security professional?

Answer 3

To test their network and systems security for vulnerabilities using the same tools that may be used against them in an offensive attack.

Question 4

What is a White Hat Hacker?

Answer 4

An ethical hacker is a security expert employed by a company to carryout penetration testing without malicious intent.

Question 5

What is a Grey Hat Hacker?

Answer 5

A blend of both black hat and white hat hacking. Their intention is not inherently malicious.

Question 6

What is a Black Hat Hacker?

Answer 6

Unethical hackers who break into computer networks with malicious intent.

Question 7

What are the Phases of ethical hacking?

Answer 7

1- Reconnaissance

2- Scanning

3- Gaining Access

4- Maintaining Access

5- Covering Tracks

Question 8

What is Cyber Resilience?

Answer 8

How quickly and efficiently a person or company can recover from a cyber attack.

Question 9

What are the elements of security?

Answer 9

1- Confidentiality (Inception - unauthorised access).

2- Integrity (Modification of data).

3- Availability (Interpretation of service).

Question 10

What is reconnaissance?

Answer 10

The act of gathering preliminary data or intelligence on a specific target.

Question 11

What is active reconnaissance?

Answer 11

In active recon the hacker engages directly with the target.

Question 12

What is passive reconnaissance?

Answer 12

Non direct engagement with the target recon is preformed through an intermediary.

Question 13

What are the reasons for hacking?

Answer 13

1- Sabotage - DOS/DDOS.
2- Fraud/Forgery - Financial theft, extortion/sextortion.
3- Hacktivist - Socially/ Politically motivated crime.
4- Publicity - To publicly demonstrate hacking skills by exposing security vulnerabilities
5- Curiosity - To uncover secret
government/organisational knowledge.

Question 14

What are the different types of cyber attacks?

Answer 14

1- Buffer overflow.
2- Denial of service/distributed denial of service 
     (DOS/DDOS).
3- Brute force password attacks.
4- Back doors and trojans.
5- Man in the middle.
6- Rogue access point.
7- VLAN hopping.
8- Social engineering.

Question 15

What are the Computer Misuse Act fundamentals?

Answer 15

1- Unauthorised access to computer material.
2- Access to computer material with malicious intent.
3- Intent to impair computer operations.
4- Hacking and spreading viruses.
5- Only when you delete, move or copy a file have you committed an offence.
6- Obtaining details through criminal means.

Question 16

What is Tailgating/Piggybacking?

Answer 16

The process of following an employee into a building to surpass any security the organisation may have to control access.

Question 17

What is Baiting?

Answer 17

To exploit the greed or curiosity of an employee by planting usb devices pre-loaded with malware.

Question 18

What is Spear Phishing?

Answer 18

Targets message based characteristics of the job positions or the contacts of a victim.

Question 19

What is Whaling/CEO fraud?

Answer 19

Targeting high level decision makers within an organisation such as CEOS/CFOS.

Question 20

What are the different types of Scanning ports?

Answer 20

1- ICMP: Internet control message protocol.
Uses ping sweeping to identify active IP
addresses.
2- TCP: Transmission control protocol
Used by networked computers to
communicate.
3- UDP: User Datagram Protocol.
Sends packets to UDP ports, one-way, no
response necessary.
4- SYN:
Searches for open ports, but does not
complete the handshake. The port
acknowledges packet, then forgets it received
it.
5- ACK:
This is a flag used to acknowledge packets
have been received.
6- FIN:
The FIN flag closes a connection to a port after the
packet has been received.
7- Telnet:
Telnet is used to establish a remote login connect on another computer.
8- SSH:
SSH is a linux equivalent of a telnet designed for remote log in via a secure channel.

Question 21

What is stack finger printing?

Answer 21

scanning the target network so, the final foot printing step can be preformed.

Question 22

What are the two primary methods of finger printing?

Answer 22

1- Banner grabbing.

2- Active stack fingerprinting.

Question 23

What is DNS Enumeration?

Answer 23

The process of locating all DNS servers and their corresponding records for an organisation.