Hacker Classes and Motives CEH Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security analyst is investigating a breach at a technology company. The attacker stole the source code for a new product and posted it on a public code repository. The attacker also defaced the company's website with a message criticizing the company's labor practices. The attacker did not sell the code or demand a ransom. Which combination of motives best explains the attacker's behavior?

   • AFinancial gain and espionage
   • BEspionage and hacktivism
   • CHacktivism and personal challenge
   • DPersonal challenge and financial gain
   Reveal Solution Discussion Select an answer first
2. 7application · easy

   A security team is profiling an attacker who breached a defense contractor's network. The attacker exfiltrated design documents for a new military drone and transmitted them to a foreign government. The attacker showed no interest in financial data or system damage. Which motive is most likely?

   • AFinancial gain
   • BPersonal challenge
   • CEspionage
   • DHacktivism
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security researcher discovers a zero-day vulnerability in a popular web browser. Instead of reporting it to the vendor, the researcher sells the exploit to a government agency known for offensive cyber operations. The researcher believes this is patriotic and does not intend to harm civilians. Which hacker class best describes the researcher's actions?

   • ABlack hat hacker, because the researcher sold the exploit without authorization from the vendor.
   • BHacktivist, because the researcher acted on political beliefs.
   • CGray hat hacker, because the researcher did not personally attack anyone.
   • DWhite hat hacker, because the researcher did not use the exploit personally.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A university student discovers a misconfigured database on a public cloud instance that exposes the personal data of thousands of users. Without any authorization, the student downloads a sample of the data, then contacts the company to report the exposure and offers to help fix it for a fee. The student does not sell or leak the data. Which hacker class best describes the student's actions?

   • ABlack hat hacker, because the student accessed data without permission.
   • BGray hat hacker, because the student accessed the data without authorization but with no malicious intent.
   • CWhite hat hacker, because the student reported the vulnerability instead of exploiting it.
   • DHacktivist, because the student exposed a security flaw to the public.
   Reveal Solution Discussion Select an answer first
6. 10application · easy

   A security engineer is asked to evaluate the security posture of a small business. The business owner is concerned about a recent news story about a hacktivist group defacing websites. The engineer recommends a vulnerability assessment. The business owner asks, 'What is the difference between a vulnerability assessment and a penetration test?' Which response is the most accurate?

   • AA vulnerability assessment identifies and reports vulnerabilities, while a penetration test exploits them to determine real-world impact.
   • BA vulnerability assessment is performed by white hats, while a penetration test is performed by gray hats.
   • CA vulnerability assessment is required by law, while a penetration test is optional.
   • DA vulnerability assessment is automated, while a penetration test is always manual.
   Reveal Solution Discussion Select an answer first