CEH Exam A2 Questions and Answers |
Latest Update | 2024/2025 | 100% Pass
What is the main characteristic of a brute-force attack?
A) It relies on social engineering
B) It uses automated tools to guess passwords
C) It exploits software vulnerabilities
D) It involves physical access to systems
✔✔ B) It uses automated tools to guess passwords
What is the role of an intrusion detection system (IDS)?
A) To block unauthorized access
B) To monitor and analyze network traffic for suspicious activity
C) To encrypt sensitive data
D) To conduct employee training
✔✔ B) To monitor and analyze network traffic for suspicious activity
What does "data exfiltration" refer to?
A) The process of backing up data
1
,B) The unauthorized transfer of data out of a network
C) The encryption of sensitive information
D) The deletion of files
✔✔ B) The unauthorized transfer of data out of a network
What is the primary function of a honeypot?
A) To attract and analyze potential attackers
B) To encrypt sensitive data
C) To monitor network performance
D) To create backups
✔✔ A) To attract and analyze potential attackers
What is the main objective of network segmentation?
A) To improve system performance
B) To limit access to sensitive information
C) To reduce hardware costs
D) To increase internet speed
✔✔ B) To limit access to sensitive information
2
,What type of malware is designed to collect personal information without user consent?
A) Virus
B) Worm
C) Spyware
D) Ransomware
✔✔ C) Spyware
What is the primary purpose of the reconnaissance phase in ethical hacking?
A) To install malware
B) To gather information about the target
C) To conduct penetration testing
D) To perform risk assessments
✔✔ B) To gather information about the target
Which of the following best describes a "phishing" attack?
A) An attack that uses malware to disrupt services
B) An attack that tricks users into revealing personal information
3
, C) An attack that targets network vulnerabilities
D) An attack that exploits system weaknesses
✔✔ B) An attack that tricks users into revealing personal information
What is the main goal of social engineering?
A) To create malware
B) To manipulate individuals into divulging confidential information
C) To assess network security
D) To install firewalls
✔✔ B) To manipulate individuals into divulging confidential information
Which tool is commonly used for network traffic analysis?
A) Wireshark
B) Metasploit
C) Nessus
D) Burp Suite
✔✔ A) Wireshark
4
Latest Update | 2024/2025 | 100% Pass
What is the main characteristic of a brute-force attack?
A) It relies on social engineering
B) It uses automated tools to guess passwords
C) It exploits software vulnerabilities
D) It involves physical access to systems
✔✔ B) It uses automated tools to guess passwords
What is the role of an intrusion detection system (IDS)?
A) To block unauthorized access
B) To monitor and analyze network traffic for suspicious activity
C) To encrypt sensitive data
D) To conduct employee training
✔✔ B) To monitor and analyze network traffic for suspicious activity
What does "data exfiltration" refer to?
A) The process of backing up data
1
,B) The unauthorized transfer of data out of a network
C) The encryption of sensitive information
D) The deletion of files
✔✔ B) The unauthorized transfer of data out of a network
What is the primary function of a honeypot?
A) To attract and analyze potential attackers
B) To encrypt sensitive data
C) To monitor network performance
D) To create backups
✔✔ A) To attract and analyze potential attackers
What is the main objective of network segmentation?
A) To improve system performance
B) To limit access to sensitive information
C) To reduce hardware costs
D) To increase internet speed
✔✔ B) To limit access to sensitive information
2
,What type of malware is designed to collect personal information without user consent?
A) Virus
B) Worm
C) Spyware
D) Ransomware
✔✔ C) Spyware
What is the primary purpose of the reconnaissance phase in ethical hacking?
A) To install malware
B) To gather information about the target
C) To conduct penetration testing
D) To perform risk assessments
✔✔ B) To gather information about the target
Which of the following best describes a "phishing" attack?
A) An attack that uses malware to disrupt services
B) An attack that tricks users into revealing personal information
3
, C) An attack that targets network vulnerabilities
D) An attack that exploits system weaknesses
✔✔ B) An attack that tricks users into revealing personal information
What is the main goal of social engineering?
A) To create malware
B) To manipulate individuals into divulging confidential information
C) To assess network security
D) To install firewalls
✔✔ B) To manipulate individuals into divulging confidential information
Which tool is commonly used for network traffic analysis?
A) Wireshark
B) Metasploit
C) Nessus
D) Burp Suite
✔✔ A) Wireshark
4
