CY-703-A Ethical Hacking - Jun 2025 Question Paper

Under each question, How to answer lists the points an answer should cover, outlined by CampusPrep from the syllabus. Check the details against your textbook.

1. 7 Marks
   aWhat are some common vulnerabilities found in Windows systems and Linux systems? Discuss.
   How to answer

   • Define OS vulnerabilities and attack surface for Windows and Linux
   • List common Windows vulnerabilities: SMB, RDP, privilege escalation, unpatched services, weak authentication
   • List common Linux vulnerabilities: misconfigured permissions, SUID, kernel exploits, SSH, package flaws
   • Discuss mitigation: patching, hardening, least privilege
2. 7 Marks
   bHow does NMAP perform host discovery and port scanning? Explain.
   How to answer

   • Define NMAP host discovery and its purpose
   • Explain host discovery techniques: ICMP, ARP, TCP SYN/ACK ping
   • Explain port scanning techniques: TCP connect, SYN, UDP, version detection
   • Give example NMAP commands and output interpretation
3. 7 Marks
   aWhat is Scanning? List and explain types of scanning performed.
   How to answer

   • Define scanning in ethical hacking / kill chain
   • List types: network, port, vulnerability scanning
   • Explain techniques: TCP SYN, connect, UDP, idle, banner grabbing
   • Mention tools and countermeasures
4. 7 Marks
   bDiscuss how ethical hackers can simulate multi-phased attacks to identify vulnerabilities and improve an organization's security posture.
   How to answer

   • Define multi-phased / APT attack simulation
   • Explain phases: recon, scanning, exploitation, persistence, covering tracks
   • Explain how ethical hackers emulate adversary to find chained vulnerabilities
   • Link findings to improved security posture and remediation
5. 7 Marks
   aWhat is a controlled attack in cyber security, and why do businesses conduct them?
   How to answer

   • Define controlled attack: authorized, scoped penetration test / red team
   • Explain objectives: validate controls, compliance, risk assessment
   • Explain why businesses conduct them: proactive defense, awareness
   • Mention rules of engagement and scope
6. 7 Marks
   bHow can businesses justify the costs of ethical hacking and penetration testing to stakeholders?
   How to answer

   • Identify costs vs benefits of ethical hacking / pentest
   • Explain risk reduction, breach cost avoidance, compliance ROI
   • Explain metrics and reporting to stakeholders
   • Suggest justification: business continuity, reputation, legal compliance
7. 7 Marks
   aExplain the difference between WEP, WPA and WPA2/WPA3 security protocols.
   How to answer

   • Define WEP, WPA, WPA2/WPA3 and their evolution
   • Compare encryption: RC4 vs TKIP vs AES-CCMP vs SAE
   • Compare authentication and vulnerabilities
   • Summarize security strength in table
8. 7 Marks
   bExplain the difference between stateful and stateless firewalls.
   How to answer

   • Define stateful vs stateless firewall
   • Compare how each filters: connection state vs per-packet rules
   • Compare performance, security, use cases
   • Give examples of deployment
9. 7 Marks
   aHow can attackers evade IDS and IPS? List some common evasion techniques.
   How to answer

   • Define IDS and IPS role in detection/prevention
   • Explain need for evasion from attacker perspective
   • List evasion techniques: fragmentation, encryption, tunneling, polymorphic shellcode
   • Mention counter-evasion
10. 7 Marks
    bHow do ethical hackers use password crackers and rootkits during exploitation? What are the risks associated with these tools?
    How to answer

    • Define password crackers and rootkits in exploitation
    • Explain ethical use: credential strength testing, privilege persistence testing
    • Explain tools: John the Ripper, Hashcat, kernel/user-mode rootkits
    • Discuss risks: system damage, persistence, legal misuse
11. 7 Marks
    aWhat is a DoS attack and how can it impact a network? Explain different types of DoS attacks and countermeasures.
    How to answer

    • Define DoS attack and impact: resource exhaustion, service unavailability
    • Explain types: SYN flood, UDP flood, ICMP, application-layer
    • Explain impact on network bandwidth and resources
    • List countermeasures: rate limiting, filtering, CDN, IDS
12. 7 Marks
    bWhat are the ethical and legal responsibilities of an ethical hacker? How should they maintain professional integrity while using hacking tools?
    How to answer

    • Define ethical and legal responsibilities: authorization, confidentiality
    • Explain compliance with laws and scope limits
    • Explain professional integrity: reporting, no data misuse, tool safety
    • Mention codes of conduct and documentation
13. 7 Marks
    aExplain the legal, professional and ethical issues that ethical hackers may face while performing security assessments. Provide real-world examples.
    How to answer

    • Define legal, professional, ethical issues in security assessment
    • Explain authorization, privacy, data handling, liability
    • Provide real-world examples of misuse or prosecution
    • Suggest best practices: contracts, scope, disclosure
14. 7 Marks
    bHow do ethical hackers conduct Bluetooth and Mobile phone hacking? Discuss security measures to prevent mobile device exploitation.
    How to answer

    • Explain Bluetooth attack vectors: Bluejacking, Bluesnarfing, Bluebugging
    • Explain mobile hacking: malware, phishing, baseband exploits
    • Discuss ethical testing methodology
    • List preventive measures: disable discoverable, updates, MDM
15. 14 Marks
    Write short note:

    1. a)Cyber Kill Chain model
    2. b)OWASP vulnerabilities
    3. c)IDS/IPS impact network scanning
    How to answer

    • Define Cyber Kill Chain 7 stages and purpose
    • List OWASP Top 10 vulnerabilities with brief impact
    • Explain IDS/IPS effect on scanning: detection, blocking, evasion
    • Give diagrams/examples for each note