An Introduction to Ethical Hacking Study
Questions and Correct Answers
What are the three main tenets of security?
a. Confidentiality, integrity, and availability
b. Authorization, authentication, and accountability
c. Deter, delay, and detect
d. Acquire, authenticate, and analyze ✅a. Confidentiality, integrity, and availability
Which of the following laws pertains to accountability for public companies relating to
financial information?
a. FISMA
b. SOX
c. 18 U.S.C. 1029
d. 18 U.S.C. 1030 ✅b. SOX
Which type of testing occurs when individuals know the entire layout of the network?
a. Black box
b. Gray box
c. White box
d. Blind testing ✅c. White box
Which type of testing occurs when you have no knowledge of the network?
a. Black box
b. Gray box
c. White box
d. Blind testing ✅a. Black box
Which form of testing occurs when insiders are not informed of the pending test?
a. Black box
b. Gray box
c. White box
d. Blind testing ✅d. Blind testing
How is ethical hacking different from hacking?
a. Ethical hackers never launch exploits.
b. Ethical hackers have signed written permission.
c. Ethical hackers act with malice.
d. Ethical hackers have verbal permission. ✅b. Ethical hackers have signed written
permission.
Which type of hacker is considered a good guy?
a. White hat
b. Gray hat
, c. Black hat
d. Suicide hacker ✅a. White hat
Which type of hacker is considered unethical?
a. White hat
b. Gray hat
c. Black hat
d. Brown hat ✅c. Black hat
Which type of hacker will carry out an attack even if the result could be a very long
prison term?
a. White hat
b. Gray hat
c. Black hat
d. Suicide hacker ✅d. Suicide hacker
Which type of hacker performs both ethical and unethical activities? a. White hat
b. Gray hat
c. Black hat
d. Suicide hacker ✅b. Gray hat
Confidentiality ✅addresses the secrecy and privacy of information. Physical examples
include locked doors, armed guards, and fences. Logical world it must protect data in
storage and in transit. For a real-life example of the failure such as Marriott's loss of 500
million passwords that occurred as far back as 2014 and was not discovered and
reported until 2018, or the revelation in 2018 that around 50 million Facebook accounts
had their usernames and passwords compromised.
Integrity ✅Provides for the correctness of information. It allows users of information to
have confidence in its correctness. Correctness doesn't mean that the data is accurate,
just that it hasn't been modified in storage or transit. Must be protected in two modes:
storage and transit.
Availability ✅Means that when a legitimate user needs the information, it should be
available. As an example, access to a backup facility 24/7 does not help if there are no
updated backups from which to restore.
Risk ✅The probability or likelihood of the occurrence or realization of a threat.
Asset ✅Any item of economic value owned by an individual or corporation.
Threat ✅Sets the stage for risk and is any agent, condition, or circumstance that could
potentially cause harm, loss, or damage, or compromise an IT asset or data asset.
Questions and Correct Answers
What are the three main tenets of security?
a. Confidentiality, integrity, and availability
b. Authorization, authentication, and accountability
c. Deter, delay, and detect
d. Acquire, authenticate, and analyze ✅a. Confidentiality, integrity, and availability
Which of the following laws pertains to accountability for public companies relating to
financial information?
a. FISMA
b. SOX
c. 18 U.S.C. 1029
d. 18 U.S.C. 1030 ✅b. SOX
Which type of testing occurs when individuals know the entire layout of the network?
a. Black box
b. Gray box
c. White box
d. Blind testing ✅c. White box
Which type of testing occurs when you have no knowledge of the network?
a. Black box
b. Gray box
c. White box
d. Blind testing ✅a. Black box
Which form of testing occurs when insiders are not informed of the pending test?
a. Black box
b. Gray box
c. White box
d. Blind testing ✅d. Blind testing
How is ethical hacking different from hacking?
a. Ethical hackers never launch exploits.
b. Ethical hackers have signed written permission.
c. Ethical hackers act with malice.
d. Ethical hackers have verbal permission. ✅b. Ethical hackers have signed written
permission.
Which type of hacker is considered a good guy?
a. White hat
b. Gray hat
, c. Black hat
d. Suicide hacker ✅a. White hat
Which type of hacker is considered unethical?
a. White hat
b. Gray hat
c. Black hat
d. Brown hat ✅c. Black hat
Which type of hacker will carry out an attack even if the result could be a very long
prison term?
a. White hat
b. Gray hat
c. Black hat
d. Suicide hacker ✅d. Suicide hacker
Which type of hacker performs both ethical and unethical activities? a. White hat
b. Gray hat
c. Black hat
d. Suicide hacker ✅b. Gray hat
Confidentiality ✅addresses the secrecy and privacy of information. Physical examples
include locked doors, armed guards, and fences. Logical world it must protect data in
storage and in transit. For a real-life example of the failure such as Marriott's loss of 500
million passwords that occurred as far back as 2014 and was not discovered and
reported until 2018, or the revelation in 2018 that around 50 million Facebook accounts
had their usernames and passwords compromised.
Integrity ✅Provides for the correctness of information. It allows users of information to
have confidence in its correctness. Correctness doesn't mean that the data is accurate,
just that it hasn't been modified in storage or transit. Must be protected in two modes:
storage and transit.
Availability ✅Means that when a legitimate user needs the information, it should be
available. As an example, access to a backup facility 24/7 does not help if there are no
updated backups from which to restore.
Risk ✅The probability or likelihood of the occurrence or realization of a threat.
Asset ✅Any item of economic value owned by an individual or corporation.
Threat ✅Sets the stage for risk and is any agent, condition, or circumstance that could
potentially cause harm, loss, or damage, or compromise an IT asset or data asset.
