CERTIFIED ETHICAL HACKER COMPREHENSIVE
TEST 2026 FULL ANSWERS REVIEW GRADED
A+
◉ ARP Spoofing. Answer: An attack in which the attacker forges ARP
request and reply packets, then sends a huge number of them to
overload a switch. ARP does not verify the device authenticity, so the
machine that sent a request simply assumes the reply came from the
right device. Attackers use this flaw to sniff the network and create a
forged ARP reply which is accepted by the machine that sent the
request. The attacker then floods the victim's ARP table and sets the
switch in forwarding mode. This enables the attacker to sniff the
network traffic
◉ Security policies types. Answer: Technical policies
Administrative policies
◉ TCP Connect. Answer: Scan used for detecting open ports upon
the completion of the three-way handshake. It works by establishing
a full connection and then dropping it by sending a RST packet.
◉ Types of black box testing. Answer: Blind testing - the tester has
little to no information about the target, while the target knows that
the test is happening. This type of testing demonstrates what a real
attacker would do to collect information about the target.
,Double blind testing - the tester knows nothing about the target, and
the target does not know the test details.
◉ Scanning techniques. Answer: Scanning techniques fall into three
categories:
Scanning ICMP network services
Scanning TCP network services
Scanning UDP network services
◉ Honeypot. Answer: A trap for attackers who try to access the
network. It is set up in such a way that any traffic to it is considered
to be a probe or an attack. So, any interaction with a honeypot points
to a malicious activity.
◉ Active vulnerability scanning. Answer: Active vulnerability
scanning refers to interacting directly with the target network to
discover vulnerabilities.
◉ Shared Key Authentication Process. Answer: Shared Key
Authentication (SKA) process refers to a process of accessing a Wi-Fi
network which uses WEP protocol and a shared secret key. A client
sends an authentication request to the access point (AP). The AP
responds with a challenge text. The client uses its WEP key to
encrypt the challenge text and sends the encrypted text back to the
,AP. The AP decrypts the text and compares the decrypted text with
the original one. If they match, the AP sends the authentication code
to the client. The client accepts the authentication code and connects
to the network.
◉ ARP. Answer: Address Resolution Protocol (ARP) resolves IP
addresses to MAC addresses. This protocol can be used for obtaining
MAC addresses of devices on the network. When two devices want
to communicate, they look up the ARP table which contains the MAC
addresses of all devices on the network. If the device cannot be
found, a query is broadcasted over the network looking for the MAC
address of the device. If that device exists on the network, it will
respond with its MAC address which is then stored in the ARP table.
◉ Discretionary Access Control (DAC). Answer: Access to files is
given to users and groups based on the identity of the user and
group membership. DAC allows users who have the access to files, to
decide themselves how they will protect and share the files.
◉ Role Based Access Control (RBAC). Answer: Access is given for a
particular file or system, giving the users all the necessary privileges
needed to perform their duties.
◉ Ways of performing penetration testing. Answer: Announced
testing
Unannounced testing
, ◉ Types of honeypots. Answer: Low-interaction honeypots
Medium-interaction honeypots
High-interaction honeypots
Production honeypots
Research honeypots
◉ Trojan. Answer: A program which contains malicious code and
has the ability to cause damage to the target system. They are
contained inside seemingly harmless programs and activated when
such programs are executed. Trojans are bound with other programs
with the help of wrappers. When a wrapped application is executed,
the trojan is first installed, and then the wrapped application is run.
◉ The objectives of system hacking. Answer: The objectives of
system hacking are to:
Gain access to the target system
Escalate privileges
Execute applications
Hide files
Cover tracks
TEST 2026 FULL ANSWERS REVIEW GRADED
A+
◉ ARP Spoofing. Answer: An attack in which the attacker forges ARP
request and reply packets, then sends a huge number of them to
overload a switch. ARP does not verify the device authenticity, so the
machine that sent a request simply assumes the reply came from the
right device. Attackers use this flaw to sniff the network and create a
forged ARP reply which is accepted by the machine that sent the
request. The attacker then floods the victim's ARP table and sets the
switch in forwarding mode. This enables the attacker to sniff the
network traffic
◉ Security policies types. Answer: Technical policies
Administrative policies
◉ TCP Connect. Answer: Scan used for detecting open ports upon
the completion of the three-way handshake. It works by establishing
a full connection and then dropping it by sending a RST packet.
◉ Types of black box testing. Answer: Blind testing - the tester has
little to no information about the target, while the target knows that
the test is happening. This type of testing demonstrates what a real
attacker would do to collect information about the target.
,Double blind testing - the tester knows nothing about the target, and
the target does not know the test details.
◉ Scanning techniques. Answer: Scanning techniques fall into three
categories:
Scanning ICMP network services
Scanning TCP network services
Scanning UDP network services
◉ Honeypot. Answer: A trap for attackers who try to access the
network. It is set up in such a way that any traffic to it is considered
to be a probe or an attack. So, any interaction with a honeypot points
to a malicious activity.
◉ Active vulnerability scanning. Answer: Active vulnerability
scanning refers to interacting directly with the target network to
discover vulnerabilities.
◉ Shared Key Authentication Process. Answer: Shared Key
Authentication (SKA) process refers to a process of accessing a Wi-Fi
network which uses WEP protocol and a shared secret key. A client
sends an authentication request to the access point (AP). The AP
responds with a challenge text. The client uses its WEP key to
encrypt the challenge text and sends the encrypted text back to the
,AP. The AP decrypts the text and compares the decrypted text with
the original one. If they match, the AP sends the authentication code
to the client. The client accepts the authentication code and connects
to the network.
◉ ARP. Answer: Address Resolution Protocol (ARP) resolves IP
addresses to MAC addresses. This protocol can be used for obtaining
MAC addresses of devices on the network. When two devices want
to communicate, they look up the ARP table which contains the MAC
addresses of all devices on the network. If the device cannot be
found, a query is broadcasted over the network looking for the MAC
address of the device. If that device exists on the network, it will
respond with its MAC address which is then stored in the ARP table.
◉ Discretionary Access Control (DAC). Answer: Access to files is
given to users and groups based on the identity of the user and
group membership. DAC allows users who have the access to files, to
decide themselves how they will protect and share the files.
◉ Role Based Access Control (RBAC). Answer: Access is given for a
particular file or system, giving the users all the necessary privileges
needed to perform their duties.
◉ Ways of performing penetration testing. Answer: Announced
testing
Unannounced testing
, ◉ Types of honeypots. Answer: Low-interaction honeypots
Medium-interaction honeypots
High-interaction honeypots
Production honeypots
Research honeypots
◉ Trojan. Answer: A program which contains malicious code and
has the ability to cause damage to the target system. They are
contained inside seemingly harmless programs and activated when
such programs are executed. Trojans are bound with other programs
with the help of wrappers. When a wrapped application is executed,
the trojan is first installed, and then the wrapped application is run.
◉ The objectives of system hacking. Answer: The objectives of
system hacking are to:
Gain access to the target system
Escalate privileges
Execute applications
Hide files
Cover tracks
