A company's web server runs an outdated version of Apache with a known remote code execution vulnerability. The server is behind a firewall that blocks all inbound traffic except ports 80 and 443. Which statement best describes how a threat could exploit this vulnerability?

The firewall blocks the exploit because it inspects all inbound packets and drops malicious payloads.

An attacker on the internet sends a specially crafted HTTP request to port 80, triggering the remote code execution flaw.

The vulnerability can only be exploited by an insider who has valid credentials to the server.

An attacker must first gain physical access to the server to exploit the vulnerability.

A security team is analyzing a breach. They find that the attacker used a phishing email to obtain credentials, then used those credentials to access a server with a known unpatched vulnerability, and finally exfiltrated data. Which statement best describes the chain of events?

The breach was caused solely by the unpatched server.

The attacker exploited multiple vulnerabilities, including human and technical, to achieve the objective.

The breach was caused solely by the phishing email.

The phishing email is the vulnerability, and the unpatched server is the threat.

A security analyst is investigating a ransomware attack. The initial infection occurred when an employee clicked a link in a phishing email. The ransomware then spread to other systems using a known vulnerability in the network software. Which combination of threat types and vulnerabilities is present?

Insider threat and social engineering; technical vulnerability (phishing email)

Physical threat (theft) and malware; configuration vulnerability (weak passwords)

Natural disaster and malware; human-factor vulnerability (network flaw)

Social engineering (phishing) and malware (ransomware); human-factor vulnerability (clicking the link) and technical vulnerability (network software flaw)

A company's security team is assessing risks. They identify that a competitor might hire a hacker to steal trade secrets, and that a disgruntled employee might leak sensitive data. Which threat source categorization applies to both of these?

Both are technical threats because they involve computers.

Both are insider threats because they have knowledge of the company.

Both are human threats, but the hacker is external and the employee is an insider.

Both are natural threats because they are unpredictable.

EC-CouncilEthical Hacking Essentials

Domain 1Objective 2

Threats, Threat Sources, and Vulnerabilities EHE Practice Questions (Page 3)

Part of the Information Security and Ethical Hacking Foundations domain, which makes up ~16% of our current practice bank.

44questions here

9free pages

6concepts

Questions 11–15

11application · medium
A company's web server runs an outdated version of Apache with a known remote code execution vulnerability. The server is behind a firewall that blocks all inbound traffic except ports 80 and 443. Which statement best describes how a threat could exploit this vulnerability?
Select an answer first
12expert · hard
A security team is analyzing a breach. They find that the attacker used a phishing email to obtain credentials, then used those credentials to access a server with a known unpatched vulnerability, and finally exfiltrated data. Which statement best describes the chain of events?
Select an answer first
13expert · hard
A security analyst is investigating a ransomware attack. The initial infection occurred when an employee clicked a link in a phishing email. The ransomware then spread to other systems using a known vulnerability in the network software. Which combination of threat types and vulnerabilities is present?
Select an answer first
14application · medium
A company's security team is assessing risks. They identify that a competitor might hire a hacker to steal trade secrets, and that a disgruntled employee might leak sensitive data. Which threat source categorization applies to both of these?
Select an answer first
15application · medium
A hospital's IT team finds that several staff members share the same administrative password for a critical patient records system. Which vulnerability category does this represent?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to EHE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “EHE” is a trademark of its owner, used for identification only.

Threats, Threat Sources, and Vulnerabilities EHE Practice Questions (Page 3)

Questions 11–15

A company's web server runs an outdated version of Apache with a known remote code execution vulnerability. The server is behind a firewall that blocks all inbound traffic except ports 80 and 443. Which statement best describes how a threat could exploit this vulnerability?

A security team is analyzing a breach. They find that the attacker used a phishing email to obtain credentials, then used those credentials to access a server with a known unpatched vulnerability, and finally exfiltrated data. Which statement best describes the chain of events?

A company's security team is assessing risks. They identify that a competitor might hire a hacker to steal trade secrets, and that a disgruntled employee might leak sensitive data. Which threat source categorization applies to both of these?

A hospital's IT team finds that several staff members share the same administrative password for a critical patient records system. Which vulnerability category does this represent?

Keep studying — Information Security and Ethical Hacking Foundations