Key terminology and techniques for the Certified Ethical Hacker exam, including reconnaissance and exploitation phases.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What does CEH stand for?
Show answer
Certified Ethical Hacker- Define reconnaissance in the context of penetration testing.
Show answer
The process of gathering information about a target system or network before attempting to exploit it.- What is the difference between passive and active reconnaissance?
Show answer
Passive reconnaissance gathers information without directly contacting the target; active reconnaissance involves direct interaction with the target systems.- Define footprinting.
Show answer
The process of collecting detailed information about a target's network, systems, and people to map its digital footprint.- What is network scanning used to identify?
Show answer
Active hosts, open ports, running services, and operating systems on a network.- What does Nmap do?
Show answer
Network Mapper is a tool used for host discovery, port scanning, service versioning, and operating system detection.- Define enumeration.
Show answer
The process of probing a target system for usernames, services, shares, and other specific information.- What is the difference between TCP and UDP scanning?
Show answer
TCP scanning establishes a full connection and is more reliable but slower; UDP scanning is connectionless, faster, but less reliable.- Define a vulnerability.
Show answer
A weakness in a system's design, implementation, or operation that can be exploited to compromise security.- What is a zero-day vulnerability?
Show answer
A previously unknown security flaw in software for which no patch or fix has been released.- Define exploitation.
Show answer
The act of taking advantage of a vulnerability in a system to gain unauthorized access or control.- What is a payload in an exploit?
Show answer
The code or data that executes on the target system after a vulnerability has been successfully exploited.- Define privilege escalation.
Show answer
The process of gaining higher-level access rights on a system, moving from a lower-privileged account to a higher-privileged one.- What is lateral movement?
Show answer
An attacker's movement through a network from one compromised system to another to reach their goal.- Define social engineering.
Show answer
The technique of manipulating people into divulging confidential information or performing actions that compromise security.
FlashKeepers