Test your basic knowledge |

CEH: Certified Ethical Hacker

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. Normal scan timing






2. Computer software or hardware that can intercept and log traffic passing over a digital network.






3. A symmetric - block-cipher data-encryption standard that uses a variablelength key that can range from 32 bits to 448 bits.






4. Any item of value or worth to an organization - whether physical or virtual.






5. A standard developed to enable routers to exchange messages containing information about routes to reach subnets in the network.






6. Black hat






7. A method of falsely identifying the source of data packets; often used by hackers to make it difficult to trace where an attack originated.






8. An information assurance strategy in which multiple layers of defense are placed throughout an Information Technology system.






9. Port 31337






10. The combination of all IT assets - resources - components - and systems.






11. A limited-function version of the Internetworking Operating System (IOS) - held in read-only memory in some earlier models of Cisco devices - capable of performing several seldom-needed low-level functions such as loading a new IOS into Flash memory






12. A documented process for a procedure designed to be consistent - repeatable - and accountable.






13. An attack where the hacker manipulates parameters within the URL string in hopes of modifying data.






14. A cyber attacker who acts without permission from - and gives prior notice to - the resource owner. Also known as a malicious hacker.






15. A method of network traffic filtering that monitors the entire communications process - including the originator of the session and from which direction it started.






16. Calculations of two components of risk: R - the magnitude of the potential loss (L) - and the probability - p - that the loss will occur.






17. Hex 12






18. Port 389






19. A NAT method in which multiple internal hosts - using private IP addressing - can be mapped through a single public IP address using the session IDs and port numbers. An internal global IP address can support in excess of 65 -000 concurrent TCP and U






20. A protocol used to pass control and error messages between nodes on the Internet.






21. Part of a service contract where the level of service is formally defined; may be required as part of the initial pen test agreements.






22. ICMP Netmask






23. The act of using numerous electronic serial numbers on a cell phone until a valid number is located.






24. TCP connect() scan






25. TCP Ping






26. A command that instructs the system processor to do nothing. Many overflow attacks involve stringing several NOP operations together (known as a NOP sled).






27. A domain composed of all the systems sharing any given physical transport media. Systems within a collision domain may collide with each other during the transmission of data. Collisions can be managed by CSMA/CD (collision detection) or CSMA/CA (col






28. The process of recording activity on a system for monitoring and later review.






29. A method in cryptography by which cryptographic keys are exchanged between users - allowing use of a cryptographic algorithm (for example - the Diffie-Hellman key exchange).






30. ex 02






31. Paranoid scan timing






32. An attacker who breaks into computer systems with malicious intent - without the owner's knowledge or permission.






33. A list of IP addresses and corresponding MAC addresses stored on a local computer.






34. A nontechnical method of hacking. Social engineering is the art of manipulating people - whether in person (human-based) or via computing methods (computer-based) - into providing sensitive information.






35. A TCP flag notifying an originating station that the preceding packet (or packets) has been received.






36. In a classful IPv4 subnet - this is the network number with all binary 0s in the subnet part of the number. When written in decimal - the zero subnet has the same number as the classful network number.






37. Steps taken to identify and limit risks to an acceptable or reasonable level of exposure.






38. Two or more LANs connected by a high-speed line across a large geographical area.






39. Aggressive scan timing






40. The exploitation of a security vulnerability






41. A string used for authentication in SNMP. The public community string is used for read-only searches - whereas the private community string is used for read/write. Community strings are transmitted in clear text in SNMPv1. SNMPv3 provides encryption






42. LAN standard - defined by ANSI X3T9.5 - specifying a 100Mbps token-passing network using fiber-optic cable and a dualring architecture for redundancy - with transmission distances of up to two kilometers.






43. ICMP Type/Code 11






44. A network system of servers that translates numeric Internet Protocol (IP) addresses into human-friendly - hierarchical Internet addresses - and vice versa.






45. A wireless LAN security standard developed by IEEE. Requires Temporal Key Integrity Protocol (TKIP) and Advanced Encryption Standard (AES).






46. A device set up to send a response on behalf of an end node to the requesting host. Proxies are generally used to obfuscate the host from the Internet.






47. A derogatory term used to describe an attacker - usually new to the field - who uses simple - easy-to-follow scripts or programs developed by others to attack computer systems and networks and deface websites.






48. An extensible mechanism for e-mail. A variety of MIME types exist for sending content such as audio - binary - or video using the Simple Mail Transfer Protocol (SMTP).






49. A formal set of rules describing data transmission - especially across a network. A protocol determines the type of error checking - the data compression method - how the sending device will indicate completion - how the receiving device will indicat






50. A nonnumerical - subjective risk evaluation. Used with qualitative assessment (an evaluation of risk that results in ratings of none - low - medium - and high for the probability.)