CERTIFIED ETHICAL HACKER COMPREHENSIVE EXAM SCRIPT COMPLETE QUESTIONS
VERIFIED SOLUTIONS
Certified Ethical Hacker Comprehensive TEST
2026/2027 FULL Answers Review Questions and
Answers Verified Solutions Latest Update
Question:
ARP Spoofing.
Answer:
An attack in which the attacker forges ARP request and reply packets, then sends a huge number of
them to overload a switch. ARP does not verify the device authenticity, so the machine that sent a
request simply assumes the reply came from the right device. Attackers use this flaw to sniff the
network and create a forged ARP reply which is accepted by the machine that sent the request. The
attacker then floods the victim's ARP table and sets the switch in forwarding mode. This enables the
attacker to sniff the network traffic
Question:
Security policies types.
Answer:
Technical policies Administrative policies
Question:
TCP Connect.
Answer:
Scan used for detecting open ports upon the completion of the three-way handshake. It works by
establishing a full connection and then dropping it by sending a RST packet.
Question:
Types of black box testing.
Answer:
,Blind testing - the tester has little to no information about the target, while the target knows that the
test is happening. This type of testing demonstrates what a real attacker would do to collect
information about the target. Double blind testing - the tester knows nothing about the target, and
the target does not know the test details.
Question:
Scanning techniques.
Answer:
Scanning techniques fall into three categories: Scanning ICMP network services Scanning TCP
network services Scanning UDP network services
Question:
Honeypot.
Answer:
A trap for attackers who try to access the network. It is set up in such a way that any traffic to it is
considered to be a probe or an attack. So, any interaction with a honeypot points to a malicious
activity.
Question:
Active vulnerability scanning.
Answer:
Active vulnerability scanning refers to interacting directly with the target network to discover
vulnerabilities.
Question:
Shared Key Authentication Process.
Answer:
Shared Key Authentication (SKA) process refers to a process of accessing a Wi-Fi network which
uses WEP protocol and a shared secret key. A client sends an authentication request to the access
point (AP). The AP responds with a challenge text. The client uses its WEP key to encrypt the
,challenge text and sends the encrypted text back to the AP. The AP decrypts the text and compares
the decrypted text with the original one. If they match, the AP sends the authentication code to the
client. The client accepts the authentication code and connects to the network.
Question:
ARP.
Answer:
Address Resolution Protocol (ARP) resolves IP addresses to MAC addresses. This protocol can be
used for obtaining MAC addresses of devices on the network. When two devices want to
communicate, they look up the ARP table which contains the MAC addresses of all devices on the
network. If the device cannot be found, a query is broadcasted over the network looking for the
MAC address of the device. If that device exists on the network, it will respond with its MAC
address which is then stored in the ARP table.
Question:
Discretionary Access Control (DAC).
Answer:
Access to files is given to users and groups based on the identity of the user and group membership.
DAC allows users who have the access to files, to decide themselves how they will protect and share
the files.
Question:
Role Based Access Control (RBAC).
Answer:
Access is given for a particular file or system, giving the users all the necessary privileges needed to
perform their duties.
Question:
Ways of performing penetration testing.
Answer:
, Announced testing Unannounced testing
Question:
Types of honeypots.
Answer:
Low-interaction honeypots Medium-interaction honeypots High-interaction honeypots Production
honeypots Research honeypots
Question:
Trojan.
Answer:
A program which contains malicious code and has the ability to cause damage to the target system.
They are contained inside seemingly harmless programs and activated when such programs are
executed. Trojans are bound with other programs with the help of wrappers. When a wrapped
application is executed, the trojan is first installed, and then the wrapped application is run.
Question:
The objectives of system hacking.
Answer:
The objectives of system hacking are to: Gain access to the target system Escalate privileges
Execute applications Hide files Cover tracks
Question:
Shoulder surfing.
Answer:
Shoulder surfing refers to observing the target while they type in their passwords, that is, looking at
their keyboard or screen.
VERIFIED SOLUTIONS
Certified Ethical Hacker Comprehensive TEST
2026/2027 FULL Answers Review Questions and
Answers Verified Solutions Latest Update
Question:
ARP Spoofing.
Answer:
An attack in which the attacker forges ARP request and reply packets, then sends a huge number of
them to overload a switch. ARP does not verify the device authenticity, so the machine that sent a
request simply assumes the reply came from the right device. Attackers use this flaw to sniff the
network and create a forged ARP reply which is accepted by the machine that sent the request. The
attacker then floods the victim's ARP table and sets the switch in forwarding mode. This enables the
attacker to sniff the network traffic
Question:
Security policies types.
Answer:
Technical policies Administrative policies
Question:
TCP Connect.
Answer:
Scan used for detecting open ports upon the completion of the three-way handshake. It works by
establishing a full connection and then dropping it by sending a RST packet.
Question:
Types of black box testing.
Answer:
,Blind testing - the tester has little to no information about the target, while the target knows that the
test is happening. This type of testing demonstrates what a real attacker would do to collect
information about the target. Double blind testing - the tester knows nothing about the target, and
the target does not know the test details.
Question:
Scanning techniques.
Answer:
Scanning techniques fall into three categories: Scanning ICMP network services Scanning TCP
network services Scanning UDP network services
Question:
Honeypot.
Answer:
A trap for attackers who try to access the network. It is set up in such a way that any traffic to it is
considered to be a probe or an attack. So, any interaction with a honeypot points to a malicious
activity.
Question:
Active vulnerability scanning.
Answer:
Active vulnerability scanning refers to interacting directly with the target network to discover
vulnerabilities.
Question:
Shared Key Authentication Process.
Answer:
Shared Key Authentication (SKA) process refers to a process of accessing a Wi-Fi network which
uses WEP protocol and a shared secret key. A client sends an authentication request to the access
point (AP). The AP responds with a challenge text. The client uses its WEP key to encrypt the
,challenge text and sends the encrypted text back to the AP. The AP decrypts the text and compares
the decrypted text with the original one. If they match, the AP sends the authentication code to the
client. The client accepts the authentication code and connects to the network.
Question:
ARP.
Answer:
Address Resolution Protocol (ARP) resolves IP addresses to MAC addresses. This protocol can be
used for obtaining MAC addresses of devices on the network. When two devices want to
communicate, they look up the ARP table which contains the MAC addresses of all devices on the
network. If the device cannot be found, a query is broadcasted over the network looking for the
MAC address of the device. If that device exists on the network, it will respond with its MAC
address which is then stored in the ARP table.
Question:
Discretionary Access Control (DAC).
Answer:
Access to files is given to users and groups based on the identity of the user and group membership.
DAC allows users who have the access to files, to decide themselves how they will protect and share
the files.
Question:
Role Based Access Control (RBAC).
Answer:
Access is given for a particular file or system, giving the users all the necessary privileges needed to
perform their duties.
Question:
Ways of performing penetration testing.
Answer:
, Announced testing Unannounced testing
Question:
Types of honeypots.
Answer:
Low-interaction honeypots Medium-interaction honeypots High-interaction honeypots Production
honeypots Research honeypots
Question:
Trojan.
Answer:
A program which contains malicious code and has the ability to cause damage to the target system.
They are contained inside seemingly harmless programs and activated when such programs are
executed. Trojans are bound with other programs with the help of wrappers. When a wrapped
application is executed, the trojan is first installed, and then the wrapped application is run.
Question:
The objectives of system hacking.
Answer:
The objectives of system hacking are to: Gain access to the target system Escalate privileges
Execute applications Hide files Cover tracks
Question:
Shoulder surfing.
Answer:
Shoulder surfing refers to observing the target while they type in their passwords, that is, looking at
their keyboard or screen.
