An attacker intercepts a TCP session between a client and a server, predicts the sequence numbers, and injects malicious packets to terminate the session. Which type of network attack is this?

A man-in-the-middle attack, which is a passive attack because the attacker relays messages.

A denial-of-service attack, which is an active attack because it disrupts service.

Sniffing, which is a passive attack because the attacker observes the traffic.

Session hijacking, which is an active attack because the attacker injects packets.

Which characteristic best describes an Advanced Persistent Threat (APT)?

A short-lived attack that uses a single exploit

An attack that only targets individuals, not organizations

An attack that is easily detected and blocked by standard defenses

A prolonged, targeted attack often sponsored by nation-states or organized crime

A security team is analyzing a malware sample. The malware spreads by copying itself to network shares and also installs a backdoor that allows remote control. It does not require user interaction to spread. Which classification best describes this malware?

Spyware, because it monitors user activity.

Trojan, because it installs a backdoor.

Worm, because it spreads automatically across the network.

Ransomware, because it encrypts files.

EC-CouncilCertified Ethical Hacker

Domain 1Objective 2

Classification and Types of Attacks CEH Practice Questions (Page 7)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

12concepts

Questions 31–35

31application · medium
An attacker intercepts a TCP session between a client and a server, predicts the sequence numbers, and injects malicious packets to terminate the session. Which type of network attack is this?
Select an answer first
32foundation · easy
Which characteristic best describes an Advanced Persistent Threat (APT)?
Select an answer first
33expert · medium
A security team is analyzing a malware sample. The malware spreads by copying itself to network shares and also installs a backdoor that allows remote control. It does not require user interaction to spread. Which classification best describes this malware?
Select an answer first
34foundation · easy
Which cryptographic attack uses precomputed tables of hash values to reverse password hashes quickly?
Select an answer first
35foundation · easy
Which social engineering attack involves an attacker creating a fake scenario to trick a victim into revealing sensitive information?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Classification and Types of Attacks CEH Practice Questions (Page 7)

Questions 31–35

An attacker intercepts a TCP session between a client and a server, predicts the sequence numbers, and injects malicious packets to terminate the session. Which type of network attack is this?

Which characteristic best describes an Advanced Persistent Threat (APT)?

A security team is analyzing a malware sample. The malware spreads by copying itself to network shares and also installs a backdoor that allows remote control. It does not require user interaction to spread. Which classification best describes this malware?

Which cryptographic attack uses precomputed tables of hash values to reverse password hashes quickly?

Which social engineering attack involves an attacker creating a fake scenario to trick a victim into revealing sensitive information?

Keep studying — Information Security and Ethical Hacking Overview