Review Questions (Chapter1) - HOD401

b

13. Which type of hacker may use their skills for both benign and malicious goals at different times? a. White hat b. Gray hat c. Black hat d. Suicide hacker

d

14. What separates a suicide hacker from other attackers? a. A disregard for the law b. A desire to be helpful c. The intent to reform d. A lack of fear of being caught

a

15. Which of the following would most likely engage in the pursuit of vulnerability research? a. White hat b. Gray hat c. Black hat d. Suicide hacker

b

16. Vulnerability research deals with which of the following? a. Actively uncovering vulnerabilities b. Passively uncovering vulnerabilities c. Testing theories d. Applying security guidance

a

17. How is black-box testing performed? a. With no knowledge b. With full knowledge c. With partial knowledge d. By a black hat

c

18. A contract is important because it does what? a. Gives permission b. Gives test parameters c. Gives proof d. Gives a mission

a

19. What does TOE stand for? a. Target of evaluation b. Time of evaluation c. Type of evaluation d. Term of evaluation

c

2. Which of the following describes an attacker who goes after a target to draw attention to a cause? a. Terrorist b. Criminal c. Hacktivist d. Script kiddie

c

20. Which of the following best describes a vulnerability? a. A worm b. A virus c. A weakness d. A rootkit

a

3. What level of knowledge about hacking does a script kiddie have? a. Low b. Average c. High d. Advanced

c

5. A white-box test means the tester has which of the following? a. No knowledge b. Some knowledge c. Complete knowledge d. Permission

d

6. Which of the following describes a hacker who attacks without regard for being caught or punished? a. Hacktivist b. Terrorist c. Criminal d. Suicide hacker

b

7. What is a code of ethics? a. A law for expected behavior b. A description of expected behavior c. A corporate policy d. A standard for civil conduct

c

8. The group Anonymous is an example of what? a. Terrorists b. Script kiddies c. Hacktivists d. Grayware

e

9. Companies may require a penetration test for which of the following reasons? a. Legal reasons b. Regulatory reasons c. To perform an audit d. To monitor network performance e. All - d

b

4. Which of the following does an ethical hacker require to start evaluating a system? a. Training b. Permission c. Planning d. Nothing

a

1. If you have been contracted to perform an attack against a target system, you are what type of hacker? a. White hat b. Gray hat c. Black hat d. Red hat

c

10. What should a pentester do prior to initiating a new penetration test? a. Plan b. Study the environment c. Get permission d. Study the code of ethics

c

11. Which of the following best describes what a hacktivist does? a. Defaces websites b. Performs social engineering c. Hacks for political reasons d. Hacks with basic skills

b

12. Which of the following best describes what a suicide hacker does? a. Hacks with permission b. Hacks without stealth c. Hacks without permission d. Hacks with stealth