CIS 171 Study Guide || QUESTIONS WITH COMPLETE
SOLUTIONS!!
Which of the following refers to a piece of code designed to cause harm that is intentionally
inserted into a software system and will activate upon the occurrence of some predetermined
data, time, or event? correct answers Logic bomb
Denial of service (DoS) and distributed denial of service (DDoS) attacks have the same
effect; however, a DDos attack _____________. correct answers is launched from large
numbers of hosts that have been compromised and act after receiving a particular command
Which of the following refers to a piece of software, a tool, or a technique that targets or
takes advantage of a vulnerability? correct answers Exploit
Which of the following refers to hacking that is carried out to bring attention to a cause,
group, or political ideology? correct answers Hacktivism
Which type of attack is characterized by someone who accesses a system of computers
without authorization? correct answers A network intrusion
Which of the following refers to the structured and methodical means of investigating,
uncovering, attacking, and reporting on a target system's strengths and vulnerabilities? correct
answers Penetration testing
What type of penetration testing is most often used when an organization wants to closely
simulate how an attacker views a system? correct answers Black-box testing
The ethical hacker is tasked with evaluating the overall state of security. The core principles
of security involve preserving all of the following except: correct answers Disclosure
A major difference between a hacker and an ethical hacker is the: correct answers code of
ethics to which each subscribes
Footprinting, scanning, enumeration, system hacking, escalation of privilege, covering tracks,
and planting backdoors are considered: correct answers Hacking steps
Planning, discovery, attack, and reporting are considered: correct answers Ethical hacking
steps
Which of the following test is designed to find loopholes or shortcomings in how tasks and
operational processes are performed? correct answers Administrative attack
Which of the following tests includes anything that targets equipment or facilities and can
also include actions against people, such as social engineering-related threats? correct
answers Physical attack
During the planning phase of a penetration test, the aim should be to: correct answers
determine why a penetration test and its associated tasks are necessary
SOLUTIONS!!
Which of the following refers to a piece of code designed to cause harm that is intentionally
inserted into a software system and will activate upon the occurrence of some predetermined
data, time, or event? correct answers Logic bomb
Denial of service (DoS) and distributed denial of service (DDoS) attacks have the same
effect; however, a DDos attack _____________. correct answers is launched from large
numbers of hosts that have been compromised and act after receiving a particular command
Which of the following refers to a piece of software, a tool, or a technique that targets or
takes advantage of a vulnerability? correct answers Exploit
Which of the following refers to hacking that is carried out to bring attention to a cause,
group, or political ideology? correct answers Hacktivism
Which type of attack is characterized by someone who accesses a system of computers
without authorization? correct answers A network intrusion
Which of the following refers to the structured and methodical means of investigating,
uncovering, attacking, and reporting on a target system's strengths and vulnerabilities? correct
answers Penetration testing
What type of penetration testing is most often used when an organization wants to closely
simulate how an attacker views a system? correct answers Black-box testing
The ethical hacker is tasked with evaluating the overall state of security. The core principles
of security involve preserving all of the following except: correct answers Disclosure
A major difference between a hacker and an ethical hacker is the: correct answers code of
ethics to which each subscribes
Footprinting, scanning, enumeration, system hacking, escalation of privilege, covering tracks,
and planting backdoors are considered: correct answers Hacking steps
Planning, discovery, attack, and reporting are considered: correct answers Ethical hacking
steps
Which of the following test is designed to find loopholes or shortcomings in how tasks and
operational processes are performed? correct answers Administrative attack
Which of the following tests includes anything that targets equipment or facilities and can
also include actions against people, such as social engineering-related threats? correct
answers Physical attack
During the planning phase of a penetration test, the aim should be to: correct answers
determine why a penetration test and its associated tasks are necessary
