EC-Council CEH QUESTIONS AND ANSWERS |
VERIFIED AND WELL DETAILED ANSWERS | PLUS
RATIONALES | GUARANTEED PASS | LATEST EXAM
UPDATE | | EXAM PREP | STUDY GUIDE | PRACTICE
TEST
,Domain 1: Introduction & Ethics (Q1–8)
Q1. What is the primary difference between a white-hat and a black-hat hacker?
A) White-hats only hack at night
B) White-hats obtain authorization before testing
C) Black-hats use only open-source tools
D) White-hats never use exploits
Answer: B
Rationale: The defining legal/ethical distinction is authorization. White-hats operate with explicit permission and
scope; black-hats do not.
Q2. Which document defines the scope, timeline, and authorized targets of a penetration test?
A) NDA
B) Rules of Engagement (RoE)
C) SLA
,D) MSA
Answer: B
Rationale: The RoE specifies what is in-scope, testing windows, allowed techniques, and emergency contacts.
The NDA covers confidentiality, not scope.
Q3. Which is NOT a phase of the ethical hacking methodology?
A) Reconnaissance
B) Gaining access
C) Maintaining access
D) Marketing the findings
Answer: D
Rationale: CEH phases: reconnaissance, scanning, gaining access, maintaining access, covering tracks, and
reporting. "Marketing" is not a phase.
Q4. A hacker motivated by a political agenda is best described as a:
A) Script kiddie
, B) Hacktivist
C) Suicide hacker
D) White-hat
Answer: B
Rationale: Hacktivists hack for ideological/political reasons. Script kiddies use others' tools without deep skill;
suicide hackers accept high personal risk.
Q5. Which law in the U.S. primarily criminalizes unauthorized access to computer systems?
A) HIPAA
B) CFAA
C) SOX
D) GLBA
Answer: B
Rationale: The Computer Fraud and Abuse Act (CFAA) is the primary U.S. federal anti-hacking statute.
Q6. "Gray box" testing means the tester has:
VERIFIED AND WELL DETAILED ANSWERS | PLUS
RATIONALES | GUARANTEED PASS | LATEST EXAM
UPDATE | | EXAM PREP | STUDY GUIDE | PRACTICE
TEST
,Domain 1: Introduction & Ethics (Q1–8)
Q1. What is the primary difference between a white-hat and a black-hat hacker?
A) White-hats only hack at night
B) White-hats obtain authorization before testing
C) Black-hats use only open-source tools
D) White-hats never use exploits
Answer: B
Rationale: The defining legal/ethical distinction is authorization. White-hats operate with explicit permission and
scope; black-hats do not.
Q2. Which document defines the scope, timeline, and authorized targets of a penetration test?
A) NDA
B) Rules of Engagement (RoE)
C) SLA
,D) MSA
Answer: B
Rationale: The RoE specifies what is in-scope, testing windows, allowed techniques, and emergency contacts.
The NDA covers confidentiality, not scope.
Q3. Which is NOT a phase of the ethical hacking methodology?
A) Reconnaissance
B) Gaining access
C) Maintaining access
D) Marketing the findings
Answer: D
Rationale: CEH phases: reconnaissance, scanning, gaining access, maintaining access, covering tracks, and
reporting. "Marketing" is not a phase.
Q4. A hacker motivated by a political agenda is best described as a:
A) Script kiddie
, B) Hacktivist
C) Suicide hacker
D) White-hat
Answer: B
Rationale: Hacktivists hack for ideological/political reasons. Script kiddies use others' tools without deep skill;
suicide hackers accept high personal risk.
Q5. Which law in the U.S. primarily criminalizes unauthorized access to computer systems?
A) HIPAA
B) CFAA
C) SOX
D) GLBA
Answer: B
Rationale: The Computer Fraud and Abuse Act (CFAA) is the primary U.S. federal anti-hacking statute.
Q6. "Gray box" testing means the tester has:
