Ethical Hacking (CY-703 (A)) - Important Questions

What are some common vulnerabilities found in Windows systems and Linux systems? Discuss.

How does NMAP perform host discovery and port scanning? Explain.

What is Scanning? List and explain types of scanning performed.

Discuss how ethical hackers can simulate multi-phased attacks to identify vulnerabilities and improve an organization's security posture.

What is a controlled attack in cyber security, and why do businesses conduct them?

How can businesses justify the costs of ethical hacking and penetration testing to stakeholders?

Explain the difference between WEP, WPA and WPA2/WPA3 wireless security protocols.

Explain the difference between stateful and stateless firewalls.

Explain common techniques attackers use to evade IDS and IPS.

Explain how ethical hackers use password crackers and rootkits during exploitation and the risks associated with these tools.

What is a DoS attack and how can it impact a network? Explain different types of DoS attacks and countermeasures.

Explain the ethical, legal and professional responsibilities and issues of ethical hackers and how to maintain integrity while performing security assessments using hacking tools.

What is Google hacking? Explain commonly used Google dorks with examples and countermeasures to prevent information leakage through search engines.

How do ethical hackers conduct Bluetooth and Mobile phone hacking? Discuss security measures to prevent mobile device exploitation.

Write short notes on any two of the following: (i) Steganography and Cryptography (ii) Vulnerability Assessment and Penetration Testing (iii) Incident Handling and Reverse Engineering