Ethical Hacking MCQs with Answers

1 .

Who is the first ethical hacker in the world?

A)

Rene Carmille

B)

Henri Dentz

C)

Charles Platon

D)

Marcel Deslaurens

Correct Answer : Rene Carmille

Explanation : The French experience in World War II is also instructive. Some credit René Carmille as the first ethical hacker because he stalled Nazi demands to get France’s Jewish population registered by machine.

2 .

Who is the father of Ethical Hacking?

A)

Ankit Fadia

B)

Gary McKinnon

C)

Kevin Mitnick

D)

Tsutomu Shimomura

Correct Answer : Kevin Mitnick

Explanation : Kevin David Mitnick (born August 6, 1963) is an American computer security consultant, author, and convicted hacker. He is best known for his high-profile 1995 arrest and five years in prison for various computer and communications-related crimes.

3 .

In which year the term hacking was coined?

A)

1950-54

B)

1955-60

C)

1965-67

D)

1970-80

Correct Answer : 1955-60

Explanation : The term came to origin in the year 1960s when very highly skilled professionals and individuals practice complex programming approaches to solve different problems.

4 .

From where the term 'hacker' first came to existence?

A)

MIT

B)

California

C)

Bell’s Lab

D)

Stanford University

Correct Answer : MIT

Explanation : At MIT (Massachusetts Institute of Technology), the term ‘hacker’ first came into origin because individuals and high skilled professionals solve different problems using programming languages. Some similar terms were also coined in this regard such as – geeks & nerds.

5 .

What is the one thing that old hackers were fond of or find interests in?

A)

Cracking Phone calls

B)

Breaking Other’s system

C)

Learning new Languages

D)

Voracious thirst for knowledge

Correct Answer : Voracious thirst for knowledge

Explanation : Hackers of the old era were considered the most influential individuals of society with intellectual learning inclination and thirst for knowledge.

6 .

In which year the first popular hacker conference took place?

A)

1991

B)

1992

C)

1993

D)

1994

Correct Answer : 1993

Explanation : The first ever internationally recognized hacker’s conference took place in the year 1993 at Las Vegas, Nevada.

7 .

FAT stands for in Ethical Hacking?

A)

Forensic Analysis Tool

B)

Format Allocation Test

C)

File Allocation Transfer

D)

File Allocation Tables

Correct Answer : File Allocation Tables

Explanation : File Allocation Table (FAT) is a file system developed for personal computers. Originally developed in 1977 for use on floppy disks, it was adapted for use on hard disks and other devices. It is often supported for compatibility reasons by current operating systems for personal computers and many mobile devices and embedded systems, allowing interchange of data between disparate systems.

8 .

What are the types of hacking stages?

A)

ApplicationsHiding

B)

PrivilegesExecuting

C)

Files Covering Tracks

D)

All of the Above

Correct Answer : All of the Above

9 .

__________is any action that might compromise cyber-security.

A)

Threat

B)

Attack

C)

Exploit

D)

Vulnerability

Correct Answer : Threat

Explanation : Threat can be termed as a possible danger that may lead to breach the cyber security and may cause possible harm to the system or the network.

10 .

Existence of weakness in a system or network is called _______

A)

Attack

B)

Exploit

C)

Threat

D)

Vulnerability

Correct Answer : Vulnerability

Explanation : Vulnerability is the term used to define weakness in any network or system that can get exploited by an attacker. Exploiting the weakness can lead to the unexpected & undesirable event in cyber security.

11 .

______is a scenario when information is accessed without authorization.

A)

Data Hack

B)

Data Breach

C)

Data infiltration

D)

Information compromise

Correct Answer : Data Breach

Explanation : Data breach is the term used when the cyber-security incident takes place where sensitive information is accessed without authority.

12 .

What is the attack called "evil twin"?

A)

MAC spoofing

B)

ARP poisoning

C)

Rogue access point

D)

Session hijacking

Correct Answer : Rogue access point

Explanation : The attack called “evil twin" is Rogue access point.

13 .

What are the forms of password cracking techniques?

A)

AttackSyllable

B)

AttacksHybrid

C)

AttackBrute Forcing

D)

All of the Above

Correct Answer : All of the Above

14 .

What is the primary goal of an Ethical Hacker?

A)

Avoiding detection

B)

Testing security controls

C)

Resolving Security Vulnerabilities

D)

Determining return on investment for security measures

Correct Answer : Resolving Security Vulnerabilities

15 .

What is the first phase of hacking?

A)

Scanning

B)

Gaining access

C)

Reconnaissance

D)

Maintaining access

Correct Answer : Scanning

Explanation : Scanning is the first phase of hacking.

16 .

Which wireless mode connects machines directly to one another, without the use of an access point?

A)

BSS

B)

Ad hoc

C)

Infrastructure

D)

Point to Point

Correct Answer : Ad hoc

Explanation : Ad hoc wireless mode connects machines directly to one another, without the use of an access point.

17 .

Which of the following is evidence that is not based on personal knowledge but that was told to the witness?

A)

Best Evidence

B)

Conclusive Evidence

C)

Hearsay Evidence

D)

Secondary Evidence

Correct Answer : Conclusive Evidence

18 .

Which of the following are the tow primary U.S.Laws that address Cybercrime?

A)

1029 and 1030

B)

2510 and 1029

C)

2510 and 2701

D)

1030 and 2701

Correct Answer : 1030 and 2701

19 .

What is the name of the first hacker's conference?

A)

OSCON

B)

SECCON

C)

DEVCON

D)

DEFCON

Correct Answer : DEFCON

Explanation : DEFCON is one of the most popular and largest hacker’s as well as a security consultant’s conference that takes place every year in Las Vegas, Nevada, where government agents, security professionals, black and white hat hackers from all over the world attend that conference.

20 .

__________ is the oldest phone hacking techniques used by hackers to make free calls

A)

Cracking

B)

Phishing

C)

Phreaking

D)

Spamming

Correct Answer : Phreaking

Explanation : Phreaking which is abbreviated as phone-hacking is a slang term and old hacking technique where skilled professionals study, explore & experiment telephone networks in order to acquire the free calling facility.

21 .

In which year, first practical technology hacking came into origin?

A)

1878

B)

1885

C)

1890

D)

1896

Correct Answer : 1878

Explanation : The first hacking (related to telephone technology) was done when the phone company – named Bell Telephone started in the year 1878.

22 .

In which year, hacking became a practical crime and a matter of concern in the field of technology?

A)

1962

B)

1967

C)

1970

D)

1974

Correct Answer : 1970

Explanation : For hackers 1970 was that era when hackers and cyber criminals figured out how wired technologies work and how these technologies can be exploited in order to gain additional advantage or misuse the technology.

23 .

Who was the first individual who performed a major hacking in the year 1971?

A)

Steve Jobs

B)

John Draper

C)

Kevin Mitnick

D)

Steve Wozniak

Correct Answer : John Draper

Explanation : In the year 1971, a Vietnam guy name John Draper figured it out as how to make phone calls free of cost. This type of phone hacking is termed Phreaking.

24 .

When any IT product, system or network is in need for testing for security reasons, then the term used is called _______

A)

Attack

B)

Threat

C)

Vulnerability

D)

Target of Evaluation

Correct Answer : Target of Evaluation

Explanation : Target of Evaluation is the term used when any IT infrastructure, system, network require evaluation for security reasons or for fixing any bugs after being tested by penetration testers.

25 .

_______ is an act of hacking by the means of which a political or social message is conveyed.

A)

Surveillance

B)

Hacktivism

C)

Whistle-blowing

D)

Pseudonymization

Correct Answer : Hacktivism

Explanation : Hacktivism is an act of defacing a website, or any network or system. Systems and networks are compromised with a political or social agenda.

26 .

_________ is a special form of attack using which hackers' exploit – human psychology.

A)

Social Engineering

B)

Insecure Network

C)

Reverse Engineering

D)

Cross Site Scripting

Correct Answer : Social Engineering

Explanation : Using social engineering techniques, hackers try to exploit the victim’s mind to gain valuable information about that person such as his/her phone number, date of birth, pet name etc.

27 .

Which of the following do not comes under Social Engineering?

A)

Phishing

B)

Tailgating

C)

Spamming

D)

Pretexting

Correct Answer : Spamming

Explanation : Spamming is the attack technique where the same message is sent indiscriminately repeatedly in order to overload the inbox or harm the user.

28 .

_________ involves scams where an individual (usually an attacker) lie to a person (the target victim) to acquire privilege data.

A)

Vishing

B)

Phishing

C)

Pretexting

D)

Spamming

Correct Answer : Pretexting

Explanation : In the pretexting technique of social engineering, the attacker pretends in need of legitimate information from the victim for confirming his/her identity.

29 .

_______ persistence and up-to-date with the latest technological updates and their flaws are some of the major qualities; an ethical hacker must need to have.

A)

High Patience

B)

Low Perseverance

C)

Lack of Understanding

D)

Weak Programming Skills

Correct Answer : High Patience

Explanation : High Patience, Persistence, Perseverance, and up-to-date with the latest technological updates and their flaws are some of the major qualities, an ethical Hacker must need to have.

30 .

____________ enables a hacker to open a piece of program or application and re-build it with further features & capabilities.

A)

Injecting code

B)

Reverse engineering

C)

Planting malware

D)

Social Engineering

Correct Answer : Reverse engineering

Explanation : Reverse engineering is the technique used to enable a hacker to open a piece of program or application (usually in a low-level language such as Assembly language) and re-build it with further features & capabilities.

31 .

Which of the following is true regarding WEP cracking?

A)

Initialization vectors are large, get reused frequently, and are sent in cleartext

B)

Initialization vectors are large, get reused frequently, but are encrypted during transmission

C)

Initialization vectors are small, get reused frequently, but are encrypted during transmission

D)

Initialization vectors are small, get reused frequently, and are sent in cleartext

Correct Answer : Initialization vectors are small, get reused frequently, and are sent in cleartext

32 .

Which of the following is a passive wireless discovery tool?

A)

Netsniff

B)

Kismet

C)

Aircrack

D)

NetStumbler

Correct Answer : Kismet

33 .

A Rainbow table attack on a password is which type of attack?

A)

Offline attack

B)

Active online attack

C)

Passive online attack

D)

None of the Above

Correct Answer : Offline attack

34 .

What is the preferred communications method used with systems on a bot-net?

A)

ICMP

B)

TFTP

C)

IRC

D)

E-Mail

Correct Answer : IRC

35 .

What is the maximum length of an SSID?

A)

8 characters

B)

16 characters

C)

32 characters

D)

64 characters

Correct Answer : 32 characters

36 .

What does the TCP RST command do?

A)

Resets the TCP Connection

B)

Starts a TCP Connection

C)

Finishes TCP Connections

D)

Restores the Connection to a Previous State

Correct Answer : Resets the TCP Connection

37 .

Name the hacker who breaks the ARPANET systems?

A)

John Draper

B)

Kevin Poulsen

C)

Kevin Mitnick

D)

Jon von Neumann

Correct Answer : Kevin Poulsen

Explanation : The ARPANET (Advanced Research Project Agency Network) got hacked by Kevin Poulsen as he breaks into the Pentagon network and their associated system but got caught immediately in the year 1983.

38 .

Who coined the term "cyberspace"?

A)

Scott Fahlman

B)

Richard Stallman

C)

Andrew Tannenbaum

D)

William Gibson

Correct Answer : William Gibson

Explanation : In the year 1821, an American – Canadian fiction pioneer cum writer, William Gibson explored the different streams of technologies and coined the term “cyberspace”. The term defines interconnected technologies that help in sharing information, interact with digital devices, storage and digital entertainment, computer and network security and stuff related to information technology.

39 .

In which year computer scientists try to integrate encryption techniques in TCP/IP protocol?

A)

1984

B)

1982

C)

1980

D)

1978

Correct Answer : 1978

Explanation : TCP/IP suite needs prior security as it is one of the most popularly used protocol suites and hence some computer scientists in the year 1978, attempts to integrate the security algorithms though they face many impediments in this regard.

40 .

In which year the Computer Fraud & Abuse Act was adopted in the United States?

A)

1984

B)

1985

C)

1986

D)

1987

Correct Answer : 1984

Explanation : This Cyber security bill got passed in the US in the year 1984 keeping this in concern that any computer related crimes do not go unpunished. This law also restricts users from unauthorized access of computer or data associated with it.

41 .

Finding & publishing any user's identity with the help of different personal details is called _________

A)

Data Breaching

B)

Personal Data Copying

C)

Doxing

D)

Secure File Transferring Protocol

Correct Answer : Doxing

Explanation : When an identity of internet user is discovered and published by following his/her details over the internet is called doxing.

42 .

In a phishing, attackers target the ________ technology to so social engineering.

A)

WI-FI network

B)

Emails

C)

Operating systems

D)

Surveillance camera

Correct Answer : Emails

Explanation : In a phishing attack, the attacker fraudulently attempts to obtain sensitive data (such as username & passwords) of the target user and use emails to send fake links which redirect them to a fake webpage which looks legitimate.

43 .

Which of the following do not comes under the intangible skills of hackers?

A)

Persistence

B)

Creative thinking

C)

Smart attacking potential

D)

Problem-solving capability

Correct Answer : Smart attacking potential

Explanation : Every hacker must possess some intangible skill-set such as creative thinking to process out a new way of penetrating a system, problem-solving skills as to cease down any active attack and persistence, try in different ways without losing hope.

44 .

Why programming language is important for ethical hackers and security professionals?

A)

Only to write malware

B)

To teach programming

C)

To develop programs to harm others

D)

For solving problems and building tool and programs

Correct Answer : For solving problems and building tool and programs

Explanation : A programming language is important for hackers and security professionals to understand so that they can understand the working behaviour of any virus, ransomware, or other malware, or write their own defense code to solve a problem. Nowadays, security tools and malware are developed by security professionals with high skills and knowledge.

45 .

Understanding of ___________ is also important for gaining access to a system through networks.

A)

Networking

B)

Hardware

C)

Email-Servers

D)

Operating System

Correct Answer : Networking

Explanation : A proper understanding of networking is very important for hackers who are trying to gain access to a system through networks. How TCP/IP works, how topologies are formed and what protocols are used for what purposes are some mandatory stuff a hacker or security professional must understand.

46 .

For hacking a database or accessing and manipulating data which of the following language the hacker must know?

A)

F#

B)

SQL

C)

Tcl

D)

HTML

Correct Answer : SQL

Explanation : For hacking a database or accessing and manipulating data, a hacker must need to have the knowledge of SQL (Structured Query Language). From a hacker’s perspective, if you’ve accessed any database for short period of time and want to change some specific data, you must need to write a proper SQL query to search for or implement your hack faster.

47 .

A penetration tester must identify and keep in mind the ________ & _________ requirements of a firm while evaluating the security postures.

A)

privacy and security

B)

hacking techniques

C)

rules and regulations

D)

ethics to talk to seniors

Correct Answer : privacy and security

Explanation : A penetration tester must keep in mind the privacy & security requirements as well as policies of a firm while evaluating the security postures of the target, which is called as “industry and business ethics policies”.

48 .

_______ helps to classify arguments and situations, better understand a cyber-crime and helps to determine appropriate actions.

A)

Social ethics

B)

Cyber-bullying

C)

Cyber-ethics

D)

Corporate behaviour

Correct Answer : Cyber-ethics

Explanation : Cyber-ethics and knowledge of proper ethical aspects while doing penetration tests helps to classify arguments and situations, better understand a cyber crime and helps to determine appropriate actions.

49 .

What is the ethics behind training how to hack a system?

A)

To hack a system without the permission

B)

To hack a network that is vulnerable

C)

To corrupt software or service using malware

D)

To think like hackers and know how to defend such attacks

Correct Answer : To think like hackers and know how to defend such attacks

50 .

Routers MAC Address is returned by?

A)

SSID

B)

BSSID

C)

MSSID

D)

RSSID

Correct Answer : BSSID

51 .

Which command attacks the target machine?

A)

Hack

B)

Attack

C)

Offense

D)

Exploit

Correct Answer : Exploit

52 .

What is NMAP?

A)

Network Scanner

B)

File Scanner

C)

Code Scanner

D)

Malware Scanner

Correct Answer : Network Scanner

Explanation : Nmap is a network scanning tool—an open source Linux command-line tool—used for network exploration, host discovery, and security auditing. Gordon Lyon (pseudonym Fyodor Vaskovich) created it to help map an entire network easily and find its open ports and services.

53 .

Which Networking Modes does not allow VM1 to connect with VM2 and vice versa?

A)

NAT

B)

NAT NETWORK

C)

BRIDGE NETWORK

D)

INTERNAL NETWORK

Correct Answer : NAT

54 .

Which is a correct bettercap command?

A)

Bettercap iface eth0

B)

Bettercap caplet automate.cap

C)

Bettercap -iface eth0

D)

Bettercap -caplet automate.cap

Correct Answer : Bettercap -iface eth0

55 .

What is the command to list payloads in Metasploit?

A)

Show payload

B)

Show payloads

C)

List payload

D)

List payloads

Correct Answer : Show payloads

56 .

CDMA stands for

A)

Code Data Multiple Access

B)

Code Data Management Authority

C)

Code Division Multiple Access

D)

None of the Above

Correct Answer : Code Division Multiple Access

Explanation : CDMA stands for “Code Division Multiple Access.” GSM stands for “Global System for Mobiles.” They are 2 radio networks used by wireless carriers.

57 .

At which layer of the OSI communication model dose bridge operate?

A)

Network

B)

Physical

C)

Transport

D)

Datalink

Correct Answer : Datalink

58 .

What are the advantages of Ethical Hacking?

A)

It is used to test how good security is on your network.

B)

It is used to recover the loss of information, especially when you lost your password.

C)

It is used to perform penetration testing to increase the security of the computer and network.

D)

All of the Above

Correct Answer : All of the Above

59 .

The process of professionally or ethically hacking a message is called

A)

Penetration Testing

B)

Encryption

C)

Decryption

D)

Cryptography

Correct Answer : Penetration Testing

60 .

______has now evolved to be one of the most popular automated tools for unethical hacking:

A)

Worms

B)

Malware

C)

Automated apps

D)

Database software

Correct Answer : Malware

61 .

When a hacker attempts to attack a host via the Internet it is known as what type of attack?

A)

Local Access

B)

Internal Attack

C)

Remote Attack

D)

Physical Access

Correct Answer : Remote Attack

62 .

Which are the four regional Internet registries?

A)

APNIC, PICNIC, NANIC, ARIN

B)

APNIC, MOSTNIC, ARIN, RIPE NCC

C)

APNIC, LACNIC, ARIN, RIPE NCC

D)

APNIC, PICNIC, NANIC, RIPE NCC

Correct Answer : APNIC, LACNIC, ARIN, RIPE NCC

Explanation : The four Internet registries are ARIN (American Registry of Internet Numbers), RIPE NCC (Europe, the Middle East, and parts of Central Asia), LACNIC (Latin American and Caribbean Internet Addresses Registry), and APNIC (Asia Pacific Network Information Centre).

63 .

______ is the branch of cyber security that deals with morality and provides different theories and a principle regarding the view-points about what is right and wrong.

A)

Social ethics

B)

Corporate ethics

C)

Ethics in cyber-security

D)

Ethics in black hat hacking

Correct Answer : Ethics in black hat hacking

Explanation : Ethics in cyber-security is the branch of cyber security that deals with morality and provides different theories and principles’ regarding the view-points about what is right and what need not to be done.

64 .

After performing ________ the ethical hacker should never disclose client information to other parties.

A)

Penetration Testing

B)

Hacking

C)

Cracking

D)

Exploiting

Correct Answer : Penetration Testing

Explanation : It is against the laws and ethics of ethical hackers that after doing penetration tests, the ethical hacker should never disclose client information to other parties. The protection of client data is in the hands of the ethical hacker who performed the tests.

65 .

Before performing any penetration test, through legal procedure, which key points listed below is not mandatory?

A)

System and network

B)

Know the nature of the organization

C)

Characteristics of work done in the firm

D)

Type of broadband company used by the firm

Correct Answer : Type of broadband company used by the firm

Explanation :

Before performing any penetration test, through the legal procedure the key points that the penetration tester must keep in mind are :

i) Know the nature of the organization

ii) what type of work the organization do and

iii) the system and networks used in various departments and their confidential data that are sent and received over the network.

66 .

The legal risks of ethical hacking include lawsuits due to _____ of personal data.

A)

deleting

B)

disclosure

C)

hacking

D)

stealing

Correct Answer : disclosure

Explanation : The legal risks of ethical hacking contains lawsuits due to disclosure of personal data during the penetration testing phase. Such disclosure of confidential data may lead to a legal fight between the ethical hacker and the organization.

67 .

_________ is the technique used in business organizations and firms to protect IT assets.

A)

Fixing Bugs

B)

Unethical Hacking

C)

Ethical Hacking

D)

Internal Data-Breach

Correct Answer : Ethical Hacking

Explanation : Ethical hacking is that used by business organizations and firms for exploiting vulnerabilities to secure the firm. Ethical hackers help in increasing the capabilities of any organization or firm in protecting their IT and information assets.

68 .

What port number does HTTPS use?

A)

21

B)

53

C)

80

D)

443

Correct Answer : 443

Explanation : HTTPS uses TCP port 443. This is a well-known port number and can be found in the Windows services file.

69 .

Banner grabbing is an example of what?

A)

Footprinting

B)

Passive operating system fingerprinting

C)

Application analysis

D)

Active operating system fingerprinting

Correct Answer : Passive operating system fingerprinting

Explanation : Banner grabbing is not detectible; therefore it is considered passive OS fingerprinting.

70 .

Which character is typically used first by the penetration tester?

A)

Single quote

B)

Semicolon

C)

Dollar sign

D)

None of the Above

Correct Answer : Single quote

71 .

Ethical hacking is also known as______

A)

White hat Hacking

B)

Penetration Testing

C)

Both (A) and (B)

D)

None of the Above

Correct Answer : Both (A) and (B)

Explanation : Ethical hacking is also known as white hat hacking & penetration testing.

72 .

Which tool can be used to perform a DNS zone transfer on Windows?

A)

whois

B)

ipconfig

C)

nslookup

D)

DNSlookup

Correct Answer : nslookup

Explanation : nslookup tool can be used to perform a DNS zone transfer on Windows .

73 .

Who was the first individual to distribute computer worms through internet?

A)

Bill Landreth

B)

Vladimir Levin

C)

Richard Stallman

D)

Robert T. Morris

Correct Answer : Robert T. Morris

Explanation : Robert Tappan Morris, a Cornell University graduate student developed Morris Worm in 1988 and was accused of the crime (under US Computer Fraud and Abuse Act.) for spreading computer worms through Internet.

74 .

____ is a powerful encryption tool released by Philip Zimmerman in the year 1991.

A)

PGP (Protected Good Privacy)

B)

PGP (Pretty Good Privacy)

C)

DES (Data Encryption Standard)

D)

AES (Advanced Encryption Standard)

Correct Answer : PGP (Pretty Good Privacy)

Explanation : This encryption program package name PGP (Pretty Good Privacy) became popular across the globe because it helps in providing authentication in data communication as well as help in maintaining privacy through cryptographic algorithms by encryption & decryption of plain texts (in emails and files) to cipher texts and vice versa.

75 .

Tailgating is also termed as _______

A)

Baiting

B)

Phishing

C)

Pretexting

D)

Piggybacking

Correct Answer : Piggybacking

Explanation : Piggybacking is the technique used for social engineering, as the attacker or unauthorized person/individual follows behind an authorized person/employee & gets into an authorized area to observe the system, gain confidential data or for a fraudulent purpose.

76 .

Physical hacking is not at all possible in hospitals, banks, private firms, and non-profit organizations.

A)

True

B)

False

C)

--

D)

--

Correct Answer : False

Explanation : Physical hacking, like other types of hacking, is possible in any institutions, organizations, clinics, private firms, banks or any other financial institutions. Hence, the above statement is false.

77 .

_______ is the ability of an individual to gain physical access to an authorized area.

A)

Physical accessing

B)

Remote accessing

C)

Network accessing

D)

Database accessing

Correct Answer : Physical accessing

Explanation : Physical accessing without prior security checking is the ability of a person to gain access to any authorized area. Physical accessing is done using piggybacking or any other suspicious means.

78 .

Which of the following is not a physical security measure to protect against physical hacking?

A)

Create a phishing policy

B)

Add front desk & restrict unknown access to the back room

C)

Updating the patches in the software you’re working at your office laptop.

D)

Analyze how employees maintain their physical data and data storage peripheral devices

Correct Answer : Updating the patches in the software you’re working at your office laptop.

Explanation : Updating the patches in your working software does not come under security measures for physical hacking. Updating the patches will help your software get free from bugs and flaws in an application as they get a fix when patches are updated.

79 .

Which of them is not an example of physical hacking?

A)

Phishing

B)

Sneak-in

C)

Break-in and steal

D)

Walk-in using piggybacking

Correct Answer : Phishing

Explanation : Phishing does not come under physical security. Walk-in without proper authorization, sneaking in through glass windows or other means and breaking in and stealing sensitive documents are examples of physical hacking.

80 .

Performing a shoulder surfing in order to check other's password is ____________ ethical practice.

A)

a good

B)

a bad

C)

not so good

D)

very good social engineering practice

Correct Answer : a bad

Explanation : Overlooking or peeping into someone’s system when he/she is entering his/her password is a bad practice and is against the ethics of conduct for every individual. Shoulder surfing is a social engineering attack approach used by some cyber-criminals to know your password and gain access to your system later.

Introduction :