CEH - Vulnerability Assessment and Exploitation

By Sam Patel · Updated May 25, 2026

Questions22
Passing Score75%
Format59% Multiple Choice
Sessions Logged2,717
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
4.5 (13)

Topics covered

This quiz

Uncategorized22 (100%)

Uncategorized22 questions

Browse more · Report this quiz

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

Which scanning phase technique sends a **SYN packet** to a port and considers it open if a **SYN-ACK** is received, without completing the three-way handshake?

Answer choices

  • A. TCP Connect Scan

  • B. SYN Stealth Scan (Half-Open Scan)

  • C. UDP Scan

  • D. XMAS Scan

Question 2

**True or False:** **Banner grabbing** is an active reconnaissance technique that retrieves service version information from open ports.

Answer choices

  • A. True

  • B. False

Question 3

**True or False:** A **zero-day vulnerability** is one that has been publicly disclosed and a patch is available but not yet applied.

Answer choices

  • A. True

  • B. False

Question 4

**ASLR (Address Space Layout Randomization)** is a security mitigation designed to protect against:

Answer choices

  • A. SQL injection attacks

  • B. Phishing attacks

  • C. Buffer overflow exploits that rely on known memory addresses

  • D. Brute force password attacks

Question 5

What does a **XMAS scan** (Nmap -sX) send, and what does a closed port respond with per RFC 793?

Answer choices

  • A. SYN flag; closed port sends RST

  • B. FIN, URG, and PSH flags set; closed port sends RST/ACK

  • C. No flags set (NULL); closed port sends SYN-ACK

  • D. ACK flag; closed port sends RST