EC-CouncilCertified Ethical Hacker
Domain 1Objective 2
Classification and Types of Attacks CEH Practice Questions (Page 1)
Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)
52questions here
11free pages
12concepts
Questions 1–5
- 1
A security analyst discovers that an attacker has captured a valid authentication token and is replaying it to gain unauthorized access to a web application. The attacker does not modify the token. Which type of attack is this?
Select an answer first - 2
A network administrator notices that a server is receiving an overwhelming number of TCP SYN packets from many different IP addresses, but never completing the handshake. The server's connection queue is filling up, causing legitimate requests to be dropped. Which type of attack is this?
Select an answer first - 3
A security analyst is investigating a network anomaly. The analyst notices that a server is sending packets with source IP addresses that do not belong to the internal network. The packets are part of an ongoing attack against an external target. The analyst suspects the server has been compromised and is being used to launch attacks. Which type of attack is the compromised server participating in?
Select an answer first - 4
Which web application attack occurs when an attacker forces a user's browser to send a request to a web application without the user's knowledge?
Select an answer first - 5
What is the primary goal of a Distributed Denial of Service (DDoS) attack?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.