CMIT 321 Ethical Hacking Final Exam 2025

CMIT 321 Ethical Hacking Final Exam 2025 If you wanted to restrict Google results to stay within the target organization, which is the most likely command that you would add to the Search Bar? Site: Inurl: Allinurl: IsDomain: - Correct Answer-Site: If you want to show the results that specifically do not include certain keywords, what command would you add to the Search Bar? - Exclude: NotInURL: Not: - Correct Answer-- Which of the following would you most likely use if you wanted to only show results for documents that included, for instance, "SteamAppUser=" -"username" -"user" intext: ispassphrase: Type:Steam: Type:PassPhrase - Correct Answer-intext: What technique would you use if you wanted to view the current contents of a website without revealing your IP details in the target site's web activity logs? &strip=1 Right Click the 'cache button' Browse in Incognito Mode WayBack Machine - Correct Answer-&strip=1 If you were looking for an Apache Status page, what command would you most likely add to the Google Search Bar? intitle: intext: Ethical Hacking Ethical Hacking Ethical Hacking inurl: IsStatus: - Correct Answer-intitle: Which of the following is not included in reconnaissance? Vulnerability Exploitation Publicly Available Information Scanning the organization's website Reviewing Staff LinkedIn pages - Correct Answer-Vulnerability Exploitation Which of the following statements is incorrect? - NSLOOKUP will provide details regarding who registered the address with the correct command line options. - NSLOOKUP and WHOIS are available as command-line utilities. - ARIN is one of five regional registries. - ARIN/WHOIS search results may provide direct phone numbers for the registrant. - Correct Answer-NSLOOKUP will provide details regarding who registered the address with the correct command line options. If you wanted to restrict your search to only Adobe Acrobat documents, what option would you add to the search bar? FileType: Intitle: Intext: IsPDF: - Correct Answer-FileType: Which of the following commands would you most likely add to the Google Search Bar to show results that contain all of the query terms, such as if you were looking for an Outlook Web Access logon page? allinurl: insite: islogon: filetype: - Correct Answer-allinurl: What might you use if you wanted to view the website that has changed over time? WayBack Machine Time Capsule Google Hacking DuckDuckGo - Correct Answer-WayBack Machine Ethical Hacking Ethical Hacking Which of the following is used to convert an IP address to a MAC address? ARP ICMP DNS DHCP - Correct Answer-ARP Which of the following networking devices would repeat every packet to every port? Hub Switch Bridge Router - Correct Answer-Hub Which of the following is considered a Non-Routable Class B Address that would be assigned to a specific host? 10.0.0.2 127.0.0.1 172.16.13.1 192.168.3.82 - Correct Answer-172.16.13.1 Which of the following networking devices would know what packets to pass out of the local segment? - Hub - Switch - Router - Proxy - Correct Answer-Router Which of the following would a firewall NOT filter traffic based on? - MAC Address - IP address - Port - Protocol Type - Correct Answer-MAC Address Which of the following would convert non-routable addresses to routable addresses? - Network Address Translation - Wired Equivalent Privacy - Dynamic Host Configuration Protocol Ethical Hacking Ethical Hacking - Automatic Private IP Addressing - Correct Answer-Network Address Translation When a networking devices retains data about previous packets, what is being determined? - State - Address - Port - Data Loss - Correct Answer-State Which of the following could trigger a false positive alert if the web site undergoes high volumes of change? - WAF - Web Proxy - IDS - IPS - Correct Answer-WAF (Web Application Firewall) When a networking device is trying to determine whether content is consistent with the application or protocol, what is occurring? - Application Layer Filtering - Address Filtering - Port Filtering - Data Loss Prevention - Correct Answer-Application Layer Filtering Which of the following would distribute sessions between more than one server? - Load Balancer - Web Proxy - IDS - IPS - Correct Answer-Load Balancer Active scans take place before passive scans, to make passive scans more effective in finding vulnerabilities. True False - Correct Answer-False Which of the following are business owners most concerned with? - Risks - Detected Vulnerabilities - Available Exploits - Unknown Vulnerabilities - Correct Answer-Risks Ethical Hacking Ethical Hacking What is the best example of what is meant by an "Ethical" Hacker? - The "Ethical" hacker reports their results to vendors so that they can fix their products. - The "Ethical" hacker provides valuable data to the security community by publishing their results. - The "Ethical" hacker works on behalf of an organization and reports their results to the organization. - The "Ethical" hacker only attacks systems hosted by those that are not liked by the public at large. - Correct Answer-The "Ethical" hacker works on behalf of an organization and reports their results to the organization. Would internal controls limit the risk of inappropriate system use? True False - Correct Answer-True Yes, transaction limits, for example, could reduce the risk. Which of the following would best describe employees (or staff) that use a system inappropriately? - Risk - Vulnerability - Hacker - Threat Actor - Correct Answer-Threat Actor Which of the following best describes how a hacker works? - A hacker works with the audit team to ensure that transaction integrity is maintained. - A hacker assesses the architecture decisions when a new system is deployed. - A hacker explores the difference between how something is supposed to work and how it really works. - A hacker validates that the system works as it was designed to do. - Correct Answer-A hacker explores the difference between how something is supposed to work and how it really works. Which of the following is NOT part of the formula for determining risk? - Threats - Known Vulnerabilities - Unknown Vulnerabilities Ethical Hacking Ethical Hacking - Threat Actor (or Agent) - Correct Answer-Unknown Vulnerabilities Which of the following is least likely to crash a system? - Penetration Testing - Vulnerability Scan - Security Assessment - Ethical Hacking - Correct Answer-Security Assessment If a system is accessible from the Internet, it considered publicly available and authorization is not required to scan for vulnerabilities. True False - Correct Answer-False Correct, permission must always be obtained from system owners, regardless of whether the system is publicly accessible. Which of the following would make the best platform to use for Ethical Hacking? - A test lab or test laptop used solely to test systems. - Virtualization should be avoided. - A system used for everyday tasks is best due to the long time scans may take place. - ESXi virtualization makes the best platform. - Correct Answer-A test lab or test laptop used solely to test systems. Which of the following would be the best place to look for how to exploit a vulnerability? - If the hacker has evidence of being able to compromise a system, the organization is responsible to reproduce the steps necessary to obtain the evidence. True False - Correct Answer-False The ethical hacker should always be able to document the steps taken to find an