A company has just deployed a new wireless network for guests. The network is isolated from the corporate network, but it uses the same SSID as the corporate wireless network. A security consultant warns that this configuration increases the attack surface. Which of the following is the primary reason?

The guest network will consume more bandwidth, slowing down the corporate network.

The guest network will automatically have access to corporate resources.

The same SSID will cause wireless interference, degrading signal quality.

Users may connect to the wrong network, potentially exposing credentials or data to an attacker-controlled access point.

A security team discovers that an attacker has been silently exfiltrating sensitive data from a corporate network for over a year. The attacker used a previously unknown vulnerability in a legacy application to gain initial access, then moved laterally and maintained persistence. Which term best describes this attack?

Advanced Persistent Threat (APT)

Which of the following is a characteristic of a passive attack?

The attacker intercepts and reads network traffic

The attacker modifies data in transit

The attacker injects malicious packets

The attacker disrupts service availability

EC-CouncilCertified Ethical Hacker

Domain 1Objective 2

Classification and Types of Attacks CEH Practice Questions (Page 9)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 52 practice questions to prepare you well beyond it. (estimate)

52questions here

11free pages

12concepts

Questions 41–45

41foundation · easy
Which of the following is an example of an attack vector?
Select an answer first
42application · medium
A company has just deployed a new wireless network for guests. The network is isolated from the corporate network, but it uses the same SSID as the corporate wireless network. A security consultant warns that this configuration increases the attack surface. Which of the following is the primary reason?
Select an answer first
43application · medium
A company discovers that a disgruntled employee, who was recently terminated, had copied confidential client data to a USB drive before leaving. The employee had legitimate access to the data as part of their job. Which type of attack best describes this incident?
Select an answer first
44application · medium
A security team discovers that an attacker has been silently exfiltrating sensitive data from a corporate network for over a year. The attacker used a previously unknown vulnerability in a legacy application to gain initial access, then moved laterally and maintained persistence. Which term best describes this attack?
Select an answer first
45foundation · easy
Which of the following is a characteristic of a passive attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Classification and Types of Attacks CEH Practice Questions (Page 9)

Questions 41–45

Which of the following is an example of an attack vector?

A company discovers that a disgruntled employee, who was recently terminated, had copied confidential client data to a USB drive before leaving. The employee had legitimate access to the data as part of their job. Which type of attack best describes this incident?

Which of the following is a characteristic of a passive attack?

Keep studying — Information Security and Ethical Hacking Overview