Ethical Hacking MCQ Questions and Answers for Practice

Enhance your knowledge and skills in ethical hacking with our comprehensive multiple-choice questions (MCQs). Ideal for students and exam aspirants, these practice tests cover essential topics and concepts.

About Ethical Hacking MCQ Questions

Ethical Hacking MCQs cover a wide range of topics, including network security, vulnerability assessment, penetration testing, and more. These questions are designed to help you understand and apply the principles of ethical hacking effectively.

Why Practice Ethical Hacking Objective Questions?

Practicing ethical hacking MCQs offers numerous benefits. It helps you prepare for exams, enhances your understanding of key concepts, and improves your readiness for interviews. Regular practice also reinforces your knowledge and builds confidence in your skills.

Who Should Use These MCQs?

Students preparing for school or college exams
Competitive exam aspirants
Candidates preparing for interviews

Ethical Hacking MCQ Questions for Practice

1. What is the primary goal of an Ethical Hacker?

Avoiding detection
Determining return on investment (ROI) for security measures
Resolving security vulnerabilities
Testing security controls

2. An Ethical Hacker is asked to perform a penetration test for a client and all he has received is a URL. What kind of test is this?

Black box penetration test
Black hat hacking test
White box penetration test

3. Someone has breached a website and managed to keep it a secret. The hack was not part of an assignment and there was no permission. What is this person called?

Black hat hacker
Hacktivist
Scriptkiddie
White hat hacker

4. You are not sure what the MAC address is of your WiFi network. After being advised to use Airodump-NG, what network should you look for?

BSSID
ESSID
SSID

5. You have saved the output of an Nmap scan in XML format. What should you use to import the scan results within Metasploit?

db_import
nmap_import
scan_import

6. What can be used to create a connection between your machine and the website you have your R57 shell running on?

Eval function
Backconnect shell
Command include

7. A tester is conducting a penetration test on a web server. She begins the test with a banner grabbing attack. She has already verified that the web server is running a Linux distribution. However, the HTTP banner reports that it is running IIS version 8. What type of defense is the web server administrator using?

Folder redirection
Port obfuscation
Process redirection
Service spoofing

8. An ethical hacker is trying to breach a website through SQL Injection. He also changed his User-Agent HTTP header, sent by his browser.What can he achieve with this action?

He acquires a matching SSL connection.
He obtains better performance of the website so that it responds faster to his requests.
He prevents forensics from revealing his real browser that was used during the attack

9. What is a function of the R57 shell?

Implementing a web-based version of Metasploit
Viewing and transferring files
Viewing the webcams of visitors towards the website

10. You are trying to find out which of your plugged in network adapters supports WiFi. What command should you use in your terminal window?

iwconfig
wificards
wireshark

11. What is ESSID?

MAC address of a connected client
MAC address of a target access point
Network name

12. When creating an XSS PoC, what is the function that provides a pop-up?

popup()
alert()
window.popup()

13. A websites URL contains index.php?page=home.php. The page=parameter allows remote URLs to be passed and it loads them. What is this an example of?

Remote File Inclusion
Remote File Injection
Remote File Impersonation