Key terminology and techniques for the Certified Ethical Hacker exam, including reconnaissance and exploitation phases.
40 cards · basic cards · AI-written, checked twice. Edit anything.
- What does CEH stand for?
- Certified Ethical Hacker
- Define reconnaissance in the context of penetration testing.
- The process of gathering information about a target system or network before attempting to exploit it.
- What is the difference between passive and active reconnaissance?
- Passive reconnaissance gathers information without directly contacting the target; active reconnaissance involves direct interaction with the target systems.
- Define footprinting.
- The process of collecting detailed information about a target's network, systems, and people to map its digital footprint.
- What is network scanning used to identify?
- Active hosts, open ports, running services, and operating systems on a network.
- What does Nmap do?
- Network Mapper is a tool used for host discovery, port scanning, service versioning, and operating system detection.
- Define enumeration.
- The process of probing a target system for usernames, services, shares, and other specific information.
- What is the difference between TCP and UDP scanning?
- TCP scanning establishes a full connection and is more reliable but slower; UDP scanning is connectionless, faster, but less reliable.
- Define a vulnerability.
- A weakness in a system's design, implementation, or operation that can be exploited to compromise security.
- What is a zero-day vulnerability?
- A previously unknown security flaw in software for which no patch or fix has been released.
- Define exploitation.
- The act of taking advantage of a vulnerability in a system to gain unauthorized access or control.
- What is a payload in an exploit?
- The code or data that executes on the target system after a vulnerability has been successfully exploited.
- Define privilege escalation.
- The process of gaining higher-level access rights on a system, moving from a lower-privileged account to a higher-privileged one.
- What is lateral movement?
- An attacker's movement through a network from one compromised system to another to reach their goal.
- Define social engineering.
- The technique of manipulating people into divulging confidential information or performing actions that compromise security.