Test your basic knowledge |

CEH: Certified Ethical Hacker

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. In penetration testing - enumeration is the act of querying a device or network segment thoroughly and systematically for information.






2. A small Trojan program that listens on port 777.






3. Using conversation or some other interaction between people to gather useful information.






4. A mode of operation in a wireless LAN in which clients send data directly to one another without utilizing a wireless access point (WAP) - much like a point-to-point wired connection.






5. A self-replicating - self-propagating - self-contained program that uses networking mechanisms to spread itself.






6. A type 0 ICMP message used to reply to ECHO requests. Used with ping to verify network layer connectivity between hosts.






7. Wireless LAN standards created by IEEE. 802.11a runs at up to 54Mbps at 5GHz - 802.11b runs at 11Mbps at 2.4GHz - 802.11g runs at 54Mbps at 2.4GHz - and 802.11n can run upwards of 150MBps.






8. A U.S. Department of Defense (DoD) standard that sets basic requirements for assessing the effectiveness of computer security controls built into a computer system.






9. The organization that governs the Internet's top-level domains - IP address allocation - and port number assignments.






10. Port 22






11. Vulnerability Scanning






12. The ability to trace actions performed on a system to a specific user or system entity.






13. Hashing algorithm that results in a 128-bit output.






14. A hacking method for stealing the cookies used during a session build and replaying them for unauthorized connection purposes.






15. Hex 29






16. An Internet Protocol Security (IPSec) header used to verify that the contents of a packet have not been modified while the packet was in transit.






17. In a classful IPv4 subnet - this is the network number with all binary 0s in the subnet part of the number. When written in decimal - the zero subnet has the same number as the classful network number.






18. A virus that plants itself in a system's boot sector and infects the master boot record.






19. A unique numerical string - created by a hashing algorithm on a given piece of data - used to verify data integrity. Generally hashes are used to verify the integrity of files after download (comparison to the hash value on the site before download)






20. 18 U.S.C. 1030






21. Any kind of connection that allows you to see all traffic passing by. Generally used in reference to a NIDS (network-based IDS) to monitor all traffic.






22. Originally an extension of PPP - this is a protocol for authentication used within wireless networks. Works with multiple authentication measures.






23. The lack of clocking (imposed time ordering) on a bit stream.






24. The combination of all IT assets - resources - components - and systems.






25. Incremental Substitution






26. Nmap normal output






27. An organization composed of engineers - scientists - and students who issue standards related to electrical - electronic - and computer engineering.






28. An e-mail message warning users of a nonexistent virus and encouraging them to pass on the message to other users.






29. Also known as a digital certificate - this is an electronic file used to verify a user's identity - providing non-repudiation throughout the system It is also a set of data that uniquely identifies an entity. Certificates contain the entity's public






30. Layer 6 of the OSI reference model. The Presentation layer ensures information sent by the Application layer of the sending system will be readable by the Application layer of the receiving system.






31. A comparison metric for different biometric devices and technologies; the point at which the false acceptance rate (FAR) equals the






32. TCP connect() scan






33. An information assurance strategy in which multiple layers of defense are placed throughout an Information Technology system.






34. An e-mail protection method using a secret message or image that can be referenced on any official communication with the site; if an e-mail is received without the image or message - the recipient knows it is not legitimate.






35. Computer software or hardware that can intercept and log traffic passing over a digital network.






36. Also known as a public key certificate - this is an electronic file that is used to verify a user's identity - providing non-repudiation throughout the sys-tem. Certificates contain the entity's public key - serial number - version - subject - algori






37. Port 135






38. The act of searching for Wi-Fi wireless networks by a person in a moving vehicle - using a portable device.






39. ACK Scan






40. A background process found in Unix - Linux - Solaris - and other Unix-based operating systems.






41. SYN Ping






42. The act of secretly listening to the private conversations of others without their consent. This can also be done over telephone lines (wiretapping) - e-mail - instant messaging - and other methods of communication considered private






43. A group of people - gathered together by a business entity - working to address a specific problem or goal.






44. A legal limit on the amount of financial liability and remedies the organization is responsible for taking on.






45. An authentication method on point-to-point links - using a three-way handshake and a mutually agreed-upon key.






46. An attack that is direct in nature - usually where the attacker injects something into - or otherwise alters - the network or system target.






47. Layer 2 of the OSI reference model. This layer provides reliable transit of data across a physical link. The Data Link layer is concerned with physical addressing - network topology - access to the network medium - error detection - sequential delive






48. The rate at which a biometric system will incorrectly identify an unauthorized individual and allow them access (see false negative).






49. White hat






50. A piece of software - provided by the vendor - intended to update or fix known - discovered problems in a computer program or its supporting data.