Ethical Hacking Concepts and Scope CEH Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a primary responsibility of an ethical hacker in an organization?

   • ADeveloping and implementing security policies
   • BProsecuting individuals who attempt to breach the network
   • CIdentifying vulnerabilities and reporting them to the organization
   • DPurchasing and deploying security tools
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which statement best defines ethical hacking?

   • AUsing only open-source tools to test the security of a system without causing any disruption
   • BUsing the same tools and techniques as malicious hackers, but with formal authorization and a defined scope to improve security
   • CPerforming security assessments without any prior notification to the organization to simulate a real attack
   • DHiring external experts to attack a system and then reporting the results to law enforcement
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   An ethical hacker discovers a critical vulnerability that could be exploited to access customer data. What is the ethical obligation of the ethical hacker?

   • AExploit the vulnerability to prove its impact and then publish the findings publicly
   • BReport the vulnerability to the organization immediately and keep the details confidential
   • CIgnore the vulnerability because it is outside the original scope
   • DSell the information to a third party for financial gain
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An ethical hacker is engaged to test a company's internal network. The scope includes all internal hosts, but explicitly excludes the HR department's file server. During the test, the hacker discovers that the HR file server is accessible from a compromised host within the scope. What should the hacker do?

   • AAccess the HR file server only to confirm it is accessible, but do not view any files.
   • BAccess the HR file server to prove the risk, then report it.
   • CDo not access the HR file server, but document the risk and recommend that the client address it.
   • DAsk the client for permission to access the HR file server, then proceed if approved.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An ethical hacker is testing a client's network and discovers that the client's firewall is misconfigured, allowing inbound traffic from the internet to an internal database server. The client's IT team is unaware of the misconfiguration. What is the ethical hacker's primary responsibility?

   • AReport the misconfiguration in the final report and recommend remediation.
   • BExploit the misconfiguration to demonstrate the risk, then report it.
   • CFix the firewall misconfiguration immediately to protect the client.
   • DKeep the finding confidential to avoid alarming the IT team.
   Reveal Solution Discussion Select an answer first