Ethical Hacking Quiz: Test Your Cybersecurity Knowledge

📚 Quick Study Guide

• 🔑 Ethical Hacking Definition: 🕵️ The practice of bypassing system security to identify potential data breaches and threats in a network. It involves legally penetrating systems to assess security vulnerabilities.
• 🛡️ Key Principles:
  • 📝 Legality: Obtain proper authorization before accessing any system.
  • Scope Definition: Clearly define the scope and limitations of the assessment.
  • Vulnerability Reporting: Document all discovered vulnerabilities and provide remediation recommendations.
  • Data Sensitivity: Handle sensitive data with care and ensure compliance with privacy regulations.
• 🛠️ Common Ethical Hacking Tools:
  • Nmap: Network scanning and host discovery.
  • Wireshark: Network protocol analyzer.
  • Metasploit: Penetration testing framework.
  • Burp Suite: Web application security testing.
• ⚠️ Types of Attacks:
  • Phishing: Deceptive attempts to obtain sensitive information.
  • SQL Injection: Exploiting vulnerabilities in database queries.
  • Cross-Site Scripting (XSS): Injecting malicious scripts into websites.
  • Denial-of-Service (DoS): Overwhelming a system with traffic to make it unavailable.
• 📜 Relevant Laws & Regulations:
  • GDPR: General Data Protection Regulation.
  • HIPAA: Health Insurance Portability and Accountability Act.
  • PCI DSS: Payment Card Industry Data Security Standard.

Practice Quiz

1. Question 1: What is the primary purpose of ethical hacking?
   1. A. To illegally gain access to systems.
   2. B. To test and improve system security.
   3. C. To distribute malware.
   4. D. To steal sensitive data.
2. Question 2: Which of the following is a key principle of ethical hacking?
   1. A. Operating without authorization.
   2. B. Exceeding the defined scope.
   3. C. Obtaining proper authorization.
   4. D. Ignoring data sensitivity.
3. Question 3: Which tool is commonly used for network scanning and host discovery?
   1. A. Microsoft Word.
   2. B. Nmap.
   3. C. Adobe Photoshop.
   4. D. Zoom.
4. Question 4: What type of attack involves deceptive attempts to obtain sensitive information?
   1. A. Phishing.
   2. B. SQL Injection.
   3. C. Cross-Site Scripting (XSS).
   4. D. Denial-of-Service (DoS).
5. Question 5: What does GDPR stand for?
   1. A. General Data Protection Regulation.
   2. B. Global Data Protocol Registry.
   3. C. Government Data Protection Rules.
   4. D. Guaranteed Data Privacy Rights.
6. Question 6: Which tool is used for web application security testing?
   1. A. Burp Suite.
   2. B. Wireshark.
   3. C. Metasploit.
   4. D. Nmap.
7. Question 7: What type of attack exploits vulnerabilities in database queries?
   1. A. Phishing.
   2. B. SQL Injection.
   3. C. Cross-Site Scripting (XSS).
   4. D. Denial-of-Service (DoS).