CMIT 321: ETHICAL HACKING FINAL EXAM QUESTIONS AND ANSWERS ALREADY GRADED A+. 100% Verified
Solutions | Updated Per Latest Guidelines | Graded A+...
CORE DOMAINS
Footprinting, Reconnaissance, and OSINT
Scanning Networks and Vulnerability Assessment
Enumeration and System Hacking
Malware Threats, Trojans, and Backdoors
Sniffing and Social Engineering
Denial of Service and Session Hijacking
Web Application, SQL Injection, and Web Server Hacking
Wireless Network and Mobile Platform Security
Cryptography and Steganography
Cloud, IoT, and OT Security Fundamentals
This comprehensive final examination is designed to assess the essential knowledge and applied reasoning
required for proficiency in ethical hacking and penetration testing. The assessment evaluates the candidate's ability
to systematically apply the phases of a security assessment, from reconnaissance and scanning to gaining access,
,maintaining presence, and covering tracks, all within legal and authorized frameworks. The exam emphasizes
higher-order cognitive skills, requiring the test-taker to analyze attack vectors, evaluate defensive
countermeasures, interpret output from industry-standard tools, and make sound methodological decisions in
complex, scenario-based environments. All questions are presented in a multiple-choice format that mirrors the
rigor and cognitive demands of a proctored final assessment, preparing candidates for success in university
examinations and professional certification pursuits.
SECTION ONE
Questions 1–100
Question 1
A penetration tester is conducting the initial phase of a security assessment. The tester uses an online tool to
identify the IP address ranges, domain names, and contact information associated with the target organization.
Which phase of the hacking methodology does this activity represent?
A. Scanning
B. Footprinting
C. Gaining Access
D. Enumeration
🟢 Correct Answer: B
,🔴 RATIONALE: Footprinting is the first phase of the ethical hacking process, focused on passively collecting
publicly available information about a target. This includes identifying IP ranges, domain names, and
administrative contacts without directly engaging the target's network. Scanning (A) involves active probing of
live systems, while enumeration (D) extracts deeper system-specific data.
Question 2
Which of the following is the primary objective of performing enumeration during a penetration test?
A. Identifying the target's internet-facing firewall rules
B. Collecting publicly available information about the organization from search engines
C. Creating a map of the target's physical security perimeter
D. Identifying valid user accounts, network shares, and system resources
🟢 Correct Answer: D
🔴 RATIONALE: Enumeration involves actively connecting to target systems to extract information such as valid
usernames, group memberships, network shares, and running services. This phase moves beyond passive
footprinting and scanning to establish active, authenticated (or unauthenticated) connections. Identifying
firewall rules (A) is part of scanning, while search engine queries (B) are footprinting activities.
Question 3
, A security analyst identifies a vulnerability in a web application that allows an attacker to insert malicious SQL
code into a login field, which is then executed by the backend database. What type of attack is this?
A. Cross-Site Scripting (XSS)
B. Buffer Overflow
C. SQL Injection
D. Cross-Site Request Forgery (CSRF)
🟢 Correct Answer: C
🔴 RATIONALE: SQL Injection occurs when an attacker inserts or "injects" malicious SQL statements into an
entry field for execution by the database server. This attack can allow an attacker to bypass authentication, read
sensitive data, or modify the database. XSS (A) involves injecting client-side scripts, not database queries.
Question 4
During a network capture, a penetration tester observes an ARP reply containing a MAC address that does not
match the legitimate host on the network. This traffic pattern is most consistent with which attack?
A. DNS Spoofing
B. MAC Flooding
C. ARP Poisoning
D. DHCP Starvation
🟢 Correct Answer: C
Solutions | Updated Per Latest Guidelines | Graded A+...
CORE DOMAINS
Footprinting, Reconnaissance, and OSINT
Scanning Networks and Vulnerability Assessment
Enumeration and System Hacking
Malware Threats, Trojans, and Backdoors
Sniffing and Social Engineering
Denial of Service and Session Hijacking
Web Application, SQL Injection, and Web Server Hacking
Wireless Network and Mobile Platform Security
Cryptography and Steganography
Cloud, IoT, and OT Security Fundamentals
This comprehensive final examination is designed to assess the essential knowledge and applied reasoning
required for proficiency in ethical hacking and penetration testing. The assessment evaluates the candidate's ability
to systematically apply the phases of a security assessment, from reconnaissance and scanning to gaining access,
,maintaining presence, and covering tracks, all within legal and authorized frameworks. The exam emphasizes
higher-order cognitive skills, requiring the test-taker to analyze attack vectors, evaluate defensive
countermeasures, interpret output from industry-standard tools, and make sound methodological decisions in
complex, scenario-based environments. All questions are presented in a multiple-choice format that mirrors the
rigor and cognitive demands of a proctored final assessment, preparing candidates for success in university
examinations and professional certification pursuits.
SECTION ONE
Questions 1–100
Question 1
A penetration tester is conducting the initial phase of a security assessment. The tester uses an online tool to
identify the IP address ranges, domain names, and contact information associated with the target organization.
Which phase of the hacking methodology does this activity represent?
A. Scanning
B. Footprinting
C. Gaining Access
D. Enumeration
🟢 Correct Answer: B
,🔴 RATIONALE: Footprinting is the first phase of the ethical hacking process, focused on passively collecting
publicly available information about a target. This includes identifying IP ranges, domain names, and
administrative contacts without directly engaging the target's network. Scanning (A) involves active probing of
live systems, while enumeration (D) extracts deeper system-specific data.
Question 2
Which of the following is the primary objective of performing enumeration during a penetration test?
A. Identifying the target's internet-facing firewall rules
B. Collecting publicly available information about the organization from search engines
C. Creating a map of the target's physical security perimeter
D. Identifying valid user accounts, network shares, and system resources
🟢 Correct Answer: D
🔴 RATIONALE: Enumeration involves actively connecting to target systems to extract information such as valid
usernames, group memberships, network shares, and running services. This phase moves beyond passive
footprinting and scanning to establish active, authenticated (or unauthenticated) connections. Identifying
firewall rules (A) is part of scanning, while search engine queries (B) are footprinting activities.
Question 3
, A security analyst identifies a vulnerability in a web application that allows an attacker to insert malicious SQL
code into a login field, which is then executed by the backend database. What type of attack is this?
A. Cross-Site Scripting (XSS)
B. Buffer Overflow
C. SQL Injection
D. Cross-Site Request Forgery (CSRF)
🟢 Correct Answer: C
🔴 RATIONALE: SQL Injection occurs when an attacker inserts or "injects" malicious SQL statements into an
entry field for execution by the database server. This attack can allow an attacker to bypass authentication, read
sensitive data, or modify the database. XSS (A) involves injecting client-side scripts, not database queries.
Question 4
During a network capture, a penetration tester observes an ARP reply containing a MAC address that does not
match the legitimate host on the network. This traffic pattern is most consistent with which attack?
A. DNS Spoofing
B. MAC Flooding
C. ARP Poisoning
D. DHCP Starvation
🟢 Correct Answer: C
