INT244 Unit 3: Enumeration, System Hacking, Malware - MCQ Practice | B. Tech. CSE

1 $What is the primary goal of Enumeration in the ethical hacking process?$

A.

To encrypt the target's data

B.

To crash the target system

C.

To physically access the server room

D.

To gather specific information like user names, shares, and services from a system

2 $Which phase of hacking immediately precedes Enumeration?$

A.

System Hacking

B.

Clearing Tracks

C.

Maintaining Access

D.

Scanning

3 $In Windows Enumeration, what is a 'Null Session'?$

A.

A session that has been timed out

B.

An unauthenticated connection to the IPC$ share

C.

A connection using an encrypted VPN

D.

A session with administrator privileges

4 $Which port is primarily associated with NetBIOS Name Service?$

A.

Port 21

B.

Port 137

C.

Port 443

D.

Port 80

5 $What command-line tool is used to display NetBIOS over TCP/IP statistics and current connections?$

A.

nbtstat

B.

ipconfig

C.

tracert

D.

ping

6 $What does SNMP stand for?$

A.

Secure Network Monitoring Protocol

B.

Standard Network Mapping Procedure

C.

Simple Network Management Protocol

D.

System Node Maintenance Protocol

7 $In SNMP, what is the 'MIB'?$

A.

Management Information Base

B.

Malware Infection Block

C.

Master IP Block

D.

Main Interface Bridge

8 $What are the two default community strings often used in SNMP?$

A.

root and guest

B.

admin and user

C.

default and secure

D.

public and private

9 $Which protocol is targeted during Directory Service Enumeration to query Active Directory?$

A.

FTP

B.

SSH

C.

HTTP

D.

LDAP

10 $What is the default TCP port for LDAP?$

A.

3389

B.

389

C.

25

D.

53

11 $Which SMTP command is used to verify if a user exists on the mail server?$

A.

HELO

B.

VRFY

C.

DATA

D.

QUIT

12 $Which SMTP command expands a mailing list to show its members?$

A.

RSET

B.

MAIL

C.

RCPT

D.

EXPN

13 $What is the definition of System Hacking?$

A.

Developing security policies

B.

Scanning a network for live hosts

C.

The process of gaining access, escalating privileges, and hiding files

D.

Monitoring network traffic for anomalies

14 $Which password attack involves trying every possible combination of characters?$

A.

Social Engineering

B.

Shoulder Surfing

C.

Dictionary Attack

D.

Brute Force Attack

15 $What is a 'Rainbow Table' used for?$

A.

Looking up pre-computed password hashes

B.

Storing firewall rules

C.

Visualizing network traffic

D.

Encrypting email communications

16 $Adding random bits of data to a password before hashing it to defeat Rainbow Tables is called:$

A.

Spiceing

B.

Peppering

C.

Salting

D.

Masking

17 $In Microsoft Windows, where are local user account passwords stored (in hashed form)?$

A.

In the boot.ini file

B.

In the kernel32.dll

C.

In the Registry SAM file

D.

In the My Documents folder

18 $What is the legacy authentication protocol used by older Windows systems, known for vulnerabilities?$

A.

NTLM

B.

Kerberos

C.

RADIUS

D.

OAUTH

19 $What is the primary authentication protocol used in Active Directory environments?$

A.

SSL

B.

WEP

C.

CHAP

D.

Kerberos

20 $What entity issues tickets in the Kerberos protocol?$

A.

The Client

B.

The Gateway

C.

The File Server

D.

The Key Distribution Center (KDC)

21 $What is 'Privilege Escalation'?$

A.

Resetting a password

B.

Downgrading user rights to Guest

C.

Moving laterally to another computer with same rights

D.

Gaining higher-level access (e.g., Administrator) from a standard user account

22 $Which tool allows an attacker to execute processes on a remote system, often used in Windows environments?$

A.

PsExec

B.

Paint

C.

Notepad

D.

Calc

23 $Software designed to infiltrate or damage a computer system without the owner's informed consent is collectively known as:$

A.

Shareware

B.

Malware

C.

Freeware

D.

Firmware

24 $What distinguishes a Computer Virus from a Worm?$

A.

There is no difference

B.

A virus encrypts data, a worm deletes it

C.

A virus requires a host program to replicate, while a worm is standalone

D.

A virus travels over networks, a worm stays local

25 $Which type of malware disguises itself as legitimate software to trick the user into installing it?$

A.

Trojan Horse

B.

Logic Bomb

C.

Virus

D.

Worm

26 $What is the primary function of Ransomware?$

A.

To display advertisements

B.

To steal credit card numbers quietly

C.

To turn the computer into a bot

D.

To encrypt user files and demand payment for the decryption key

27 $Software that gathers information about a person or organization without their knowledge is called:$

A.

Adware

B.

Logic Bomb

C.

Ransomware

D.

Spyware

28 $Malware that automatically delivers advertisements is known as:$

A.

Botnet

B.

Adware

C.

Rootkit

D.

Virus

29 $What is 'Scareware'?$

A.

A virus that deletes system 32

B.

Malware that tricks users into buying unnecessary software by claiming their computer is infected

C.

A worm that spreads via email

D.

Software that screams when opened

30 $A type of malicious code that remains dormant until a specific event or date triggers it is called:$

A.

Adware

B.

Backdoor

C.

Logic Bomb

D.

Spyware

31 $What is a 'Rootkit'?$

A.

A password cracking tool

B.

A kit for rooting Android phones

C.

Software designed to hide the existence of other malware and maintain privileged access

D.

A database scanning tool

32 $A 'Polymorphic Virus' is difficult to detect because:$

A.

It changes its code or signature each time it infects a new file

B.

It only runs on Linux

C.

It is written in Python

D.

It is invisible to the user

33 $What is a 'Macro Virus'?$

A.

A virus that attacks Mac computers

B.

A virus written in the macro language of applications like Microsoft Word or Excel

C.

A virus that infects the boot sector

D.

A virus that is very large in file size

34 $A network of compromised computers controlled by an attacker is called a:$

A.

Intranet

B.

Darknet

C.

Subnet

D.

Botnet

35 $What is a 'Wrapper' or 'Binder' in the context of Trojans?$

A.

A tool used to combine a malicious executable with a legitimate file

B.

A method of encrypting emails

C.

A firewall rule

D.

A type of antivirus

36 $Which of the following describes a 'Drive-by Download'?$

A.

Downloading drivers for a printer

B.

Downloading files to a USB drive

C.

Manually downloading a virus for research

D.

Unintended download of malware by visiting a compromised website

37 $Under U.S. law, which act is primarily used to prosecute computer hacking and malware distribution?$

A.

SOX

B.

GDPR

C.

HIPAA

D.

CFAA (Computer Fraud and Abuse Act)

38 $In the context of malware and the law, what does 'Intent' typically determine?$

A.

The difference between accidental damage and criminal liability

B.

The programming language used

C.

The speed of the internet connection

D.

The cost of the hardware

39 $What is an 'Overt Channel'?$

A.

A channel used only by spies

B.

A hidden communication path

C.

An encrypted VPN

D.

A legitimate, authorized communication path for transferring data

40 $What is a 'Covert Channel'?$

A.

A public chat room

B.

A mechanism used to transfer information in a way that violates the system's security policy

C.

A TV channel for hackers

D.

A standard FTP connection

41 $Hiding data within the headers of TCP/IP packets is an example of:$

A.

Phishing

B.

Social Engineering

C.

Overt Channel

D.

Covert Storage Channel

42 $Manipulating system resources to signal information (e.g., CPU usage patterns) is an example of:$

A.

Covert Storage Channel

B.

Covert Timing Channel

C.

Multiplexing

D.

Overt Channel

43 $Steganography is best described as:$

A.

Scanning ports

B.

Hiding the existence of a message within another medium (like an image)

C.

Scrambling text so it is unreadable

D.

Cracking passwords

44 $Which tool is commonly used to extract password hashes from Windows memory (LSASS)?$

A.

Nmap

B.

Mimikatz

C.

Wireshark

D.

Ping

45 $What is a 'Zero-Day' exploit?$

A.

An attack that exploits a vulnerability unknown to the software vendor

B.

An attack that occurs at midnight

C.

A virus that lasts for zero days

D.

An exploit that takes zero days to fix

46 $What is the purpose of a 'Keylogger'?$

A.

To lock the keyboard

B.

To record every keystroke made by a user

C.

To log into a website

D.

To generate encryption keys

47 $Which Windows service is the 'Local Security Authority' responsible for validating users?$

A.

WINLOGON.EXE

B.

EXPLORER.EXE

C.

LSASS.EXE

D.

SVCHOST.EXE

48 $A malware that restricts access to the computer system until a fee is paid is specifically targeting which aspect of the CIA triad?$

A.

Non-repudiation

B.

Availability

C.

Confidentiality

D.

Integrity

49 $In Windows, what does the command net user do?$

A.

Connects to a shared folder

B.

Starts a service

C.

Displays network statistics

D.

Adds, removes, or modifies user accounts

50 $Which of the following is an example of a Multipartite Virus?$

A.

A virus that attacks both the boot sector and executable files

B.

A virus that uses multiple encryption keys

C.

A virus that attacks multiple people

D.

A virus that has multiple parts

Unit 3: Enumeration, System Hacking, Malware - Practice Quiz

Did this save you a night before the exam?