Ethical Hacking ITS2 Unit 5 Practice
Questions and Correct Answers
Kali Linux ✅Linux security distribution which includes advanced penetration testing
tools.
Port Scanning ✅Using a program to remotely determine which ports on a system are
open (e.g., whether systems allow connections through those ports).
Packet Sniffer ✅Software or hardware that can intercept and log traffic that passes
over a network.
Packet crafting ✅Creating a packet according to various requirements to carry out
attacks and to exploit vulnerabilities in a network.
Vulnerability ✅A weakness which can be exploited by a threat actor, such as a hacker,
to perform unauthorized actions within a computer system.
Payload ✅The component of a cyber attack that executes a malicious activity.
Penetration Testing ✅A test by an outsider to exploit any vulnerabilities in a system.
Passive Reconnaissance ✅Using searches online for publicly accessible information
that can reveal valuable insight about a system and its vulnerabilities.
Active Reconnaissance ✅Where an attacker engages with the target system, looking
for information and vulnerabilities. e.g., conducting a port scan to determine any open
ports.
Firewalking ✅The process of systematically testing each port on a firewall to map rules
and determine accessible ports.
Wardriving ✅The practice of driving around and locating open wireless access points.
Network Enumeration ✅Computing activity in which user names, and info on groups,
shares and services of networked computers are retrieved.
Physical Security ✅The implementation and practice of various control mechanisms
that are intended to restrict physical access to facilities.
Operational security ✅Systems and protocols an organization puts in place to protect
itself.
Questions and Correct Answers
Kali Linux ✅Linux security distribution which includes advanced penetration testing
tools.
Port Scanning ✅Using a program to remotely determine which ports on a system are
open (e.g., whether systems allow connections through those ports).
Packet Sniffer ✅Software or hardware that can intercept and log traffic that passes
over a network.
Packet crafting ✅Creating a packet according to various requirements to carry out
attacks and to exploit vulnerabilities in a network.
Vulnerability ✅A weakness which can be exploited by a threat actor, such as a hacker,
to perform unauthorized actions within a computer system.
Payload ✅The component of a cyber attack that executes a malicious activity.
Penetration Testing ✅A test by an outsider to exploit any vulnerabilities in a system.
Passive Reconnaissance ✅Using searches online for publicly accessible information
that can reveal valuable insight about a system and its vulnerabilities.
Active Reconnaissance ✅Where an attacker engages with the target system, looking
for information and vulnerabilities. e.g., conducting a port scan to determine any open
ports.
Firewalking ✅The process of systematically testing each port on a firewall to map rules
and determine accessible ports.
Wardriving ✅The practice of driving around and locating open wireless access points.
Network Enumeration ✅Computing activity in which user names, and info on groups,
shares and services of networked computers are retrieved.
Physical Security ✅The implementation and practice of various control mechanisms
that are intended to restrict physical access to facilities.
Operational security ✅Systems and protocols an organization puts in place to protect
itself.
