Hacker Classes and Motives CEH Practice Questions (Page 3)

Questions 11–13

1. 11foundation · easy

   A group of attackers defaces a government website and replaces its content with political messages to protest a new law. Their primary motivation is best described as:

   • AFinancial gain
   • BEspionage
   • CPersonal challenge
   • DHacktivism
   Reveal Solution Discussion Select an answer first
2. 12application · easy

   A security consultant is hired by a bank to test the resilience of its online banking portal. The consultant signs a detailed contract that defines the exact test scope, including allowed IP ranges, test times, and the prohibition of denial-of-service attacks. During the engagement, the consultant discovers a critical vulnerability in the login flow and immediately reports it to the bank with a proof-of-concept exploit. How should the consultant's actions be classified?

   • AWhite hat hacker, because the consultant has explicit authorization and follows the agreed scope.
   • BGray hat hacker, because the consultant found a vulnerability that could be exploited for financial gain.
   • CBlack hat hacker, because the consultant used exploit techniques that could be used by criminals.
   • DGray hat hacker, because the consultant reported the vulnerability instead of selling it on the dark web.
   Reveal Solution Discussion Select an answer first
3. 13expert · hard

   A security researcher discovers a zero-day vulnerability in a widely used email client. The researcher is a member of a hacktivist group that has been protesting a government's surveillance policies. The researcher decides to exploit the vulnerability to steal emails from government officials and publish them to expose the surveillance programs. The researcher does not sell the data or seek personal financial gain. How should the researcher's actions be classified?

   • AWhite hat hacker, because the researcher is exposing government wrongdoing.
   • BHacktivist, because the researcher's motive is political and the target is a government.
   • CBlack hat hacker, because the researcher exploited a vulnerability without authorization.
   • DGray hat hacker, because the researcher did not seek financial gain.
   Reveal Solution Discussion Select an answer first