Ethical Hacking Fundamentals and Hacker Classes ECSS Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which action is characteristic of a black hat hacker?

   • AScanning a network with permission as part of a security audit
   • BExploiting a vulnerability in a bank's system to transfer funds illegally
   • CPerforming a penetration test under a signed contract
   • DReporting a vulnerability to the vendor and waiting for a patch
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which hacker category is known for using their skills to promote a political or social cause?

   • AState-sponsored
   • BGray hat
   • CWhite hat
   • DHacktivist
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the primary intent of a black hat hacker?

   • ATo test their skills in a legal environment
   • BTo expose security flaws without causing damage
   • CTo gain unauthorized access for personal or financial gain
   • DTo improve system security by finding vulnerabilities
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A company wants to hire a security professional to test its new mobile app. The professional must have legal protection and clear boundaries for the testing activities. What is the most important document or agreement to have in place before testing begins?

   • AA verbal agreement from the IT manager to proceed with testing.
   • BA written authorization and scope document signed by both parties.
   • CA liability waiver that releases the tester from any damages caused during testing.
   • DA non-disclosure agreement (NDA) to protect the company's confidential information.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A security consultant discovers a critical vulnerability in a company's public website while browsing it. Without authorization, she exploits the vulnerability to prove it exists, then sends the company a detailed report. She does not demand payment or cause damage. How would this consultant most accurately be classified?

   • ABlack hat hacker, because she performed an unauthorized attack.
   • BGray hat hacker, because she broke the law but with good intentions.
   • CScript kiddie, because she used existing tools to find the vulnerability.
   • DWhite hat hacker, because her intent is to improve security.
   Reveal Solution Discussion Select an answer first