Ethical Hacking MCQ Questions and Answers for Practice

1. What is the primary goal of an Ethical Hacker?

1. Resolving security vulnerabilities
2. Testing security controls
3. Avoiding detection
4. Determining return on investment (ROI) for security measures

2. An Ethical Hacker is asked to perform a penetration test for a client and all he has received is a URL. What kind of test is this?

1. White box penetration test
2. Black box penetration test
3. Black hat hacking test

3. Someone has breached a website and managed to keep it a secret. The hack was not part of an assignment and there was no permission. What is this person called?

1. Scriptkiddie
2. White hat hacker
3. Black hat hacker
4. Hacktivist

4. You are not sure what the MAC address is of your WiFi network. After being advised to use Airodump-NG, what network should you look for?

1. SSID
2. BSSID
3. ESSID

5. You have saved the output of an Nmap scan in XML format. What should you use to import the scan results within Metasploit?

1. scan_import
2. db_import
3. nmap_import

6. What can be used to create a connection between your machine and the website you have your R57 shell running on?

1. Command include
2. Eval function
3. Backconnect shell

7. A tester is conducting a penetration test on a web server. She begins the test with a banner grabbing attack. She has already verified that the web server is running a Linux distribution. However, the HTTP banner reports that it is running IIS version 8. What type of defense is the web server administrator using?

1. Process redirection
2. Service spoofing
3. Folder redirection
4. Port obfuscation

8. An ethical hacker is trying to breach a website through SQL Injection. He also changed his User-Agent HTTP header, sent by his browser.What can he achieve with this action?

1. He prevents forensics from revealing his real browser that was used during the attack
2. He acquires a matching SSL connection.
3. He obtains better performance of the website so that it responds faster to his requests.

9. What is a function of the R57 shell?

1. Viewing the webcams of visitors towards the website
2. Implementing a web-based version of Metasploit
3. Viewing and transferring files

10. You are trying to find out which of your plugged in network adapters supports WiFi. What command should you use in your terminal window?

1. wireshark
2. iwconfig
3. wificards

11. What is ESSID?

1. Network name
2. MAC address of a connected client
3. MAC address of a target access point

12. When creating an XSS PoC, what is the function that provides a pop-up?

1. window.popup()
2. popup()
3. alert()

13. A websites URL contains index.php?page=home.php. The page=parameter allows remote URLs to be passed and it loads them. What is this an example of?

1. Remote File Impersonation
2. Remote File Inclusion
3. Remote File Injection