Test your basic knowledge |

CEH: Certified Ethical Hacker

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. A systematic process for the assessment of security vulnerabilities.






2. Evaluation in which testers attempt to penetrate the network.






3. A query and response protocol widely used for querying databases that store the registered users or assignees of an Internet resource - such as a domain name - an IP address - or an autonomous system.






4. Sending packets or requests to another system to gain information to be used to identify weaknesses and protect the system from attacks.






5. A piece of code intentionally inserted into a software system that will perform a malicious function when specified conditions are met at some future point.






6. Layer 7 of the OSI reference model. The Application layer provides services to applications - which allow them access to the network. Protocols such as FTP and SMTP reside here.






7. A symmetric key cryptographic algorithm that transforms a block of information at a time using a cryptographic key. For a block cipher algorithm - the length of the input block is the same as the length of the output block.






8. Any circumstance or event with the potential to adversely impact organizationaloperations - organizational assets - or individuals through an information system via unauthorized access - destruction - disclosure - modification of information - and/or






9. Drawing symbols in public places to alert others to an open Wi-Fi network. War chalking can include the SSIDs - administrative passwords to APs - and other information.






10. A secret - typically consisting of only decimal digits - that a claimant memorizes and uses to authenticate his identity






11. A computer placed outside a firewall to provide public services to other Internet sites - and hardened to resist external attacks.






12. Start of Authority record. This record identifies the primary name server for the zone. The SOA record contains the host name of the server responsible for all DNS records within the namespace - as well as the basic properties of the domain.






13. ICMP Type/Code 0-0






14. Also known as the dot-dot-slash attack. Using directory traversal - the attacker attempts to access restricted directories and execute commands outside intended web server directories by using the URL to redirect to an unintended folder location.






15. Controls to detect anomalies or undesirable events occurring on a system.






16. A distance-vector routing protocol that employs the hop count as a routing metric. The 'hold down time -' used to define how long a route is held in memory - is 180 seconds. RIP prevents routing loops by implementing a limit on the number of hops all






17. A free - open source version of the Berkeley Software Distribution of Unix - often used in embedded systems.






18. A communications path - such as the Internet - authorized for data transmission within a computer system or network.






19. A NAT method in which multiple internal hosts - using private IP addressing - can be mapped through a single public IP address using the session IDs and port numbers. An internal global IP address can support in excess of 65 -000 concurrent TCP and U






20. An environmentally conditioned workspace partially equipped with IT and telecommunications equipment to support relocated IT operations in the event of a significant disruption.






21. A type of DNS transfer - where all records from an SOA are transmitted to the requestor. Zone transfers have two options: full (opcode AXFR) and incremental (IXFR).






22. CAN-SPAM






23. In computer security - this is an algorithm that uses separate keys for encryption and decryption.






24. A widely used authentication protocol developed at the MassachusettsInstitute of Technology (MIT). Kerberos authentication uses tickets - Ticket Granting Service - and Key Distribution Center.






25. nmap all output






26. The process of using easily accessible DNS records to map a target network's internal hosts.






27. A symmetric - block-cipher data-encryption standard that uses a variablelength key that can range from 32 bits to 448 bits.






28. A derogatory term used to describe an attacker - usually new to the field - who uses simple - easy-to-follow scripts or programs developed by others to attack computer systems and networks and deface websites.






29. A set of rules defined by a system administrator that indicates whether access is allowed or denied to resource objects.






30. White box test






31. UDP Scan






32. A firewall evasion technique whereby packets are wrapped in HTTP - as a covert channel to the target.






33. Also known as a digital certificate - this is an electronic file used to verify a user's identity - providing non-repudiation throughout the system It is also a set of data that uniquely identifies an entity. Certificates contain the entity's public






34. A computer security expert who performs security audits and penetration tests against systems or network segments - with the owner's full knowledge and permission - in an effort to increase security.






35. nmap






36. In penetration testing - enumeration is the act of querying a device or network segment thoroughly and systematically for information.






37. A piece of software - provided by the vendor - intended to update or fix known - discovered problems in a computer program or its supporting data.






38. Polymorphic Virus






39. A U.S. Department of Defense (DoD) standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system.






40. Vulnerability Scanning






41. A measurable - physical characteristic used to recognize the identity - or verify the claimed identity - of an applicant. Facial images - fingerprints - and handwriting samples are all examples of biometrics.






42. A collection of historical records or the place where they are kept. In computing - an archive generally refers to backup copies of logs and/or data.






43. The organization that governs the Internet's top-level domains - IP address allocation - and port number assignments.






44. SYN Ping






45. The process of recording activity on a system for monitoring and later review.






46. Directing a protocol from one port to another.






47. Port 110






48. The act of dialing all numbers within an organization to discover open modems.






49. nmap






50. Formal description and evaluation of the vulnerabilities in an information system