CCPA Exam
156-401 Questions V8.02
CCPA
Topics - Hacking 101 Check
Point Certified PenTesting
Associate (CCPA)
1.What is the primary objective of penetration testing?
A. To disrupt network operations
B. To identify vulnerabilities before malicious actors do
C. To create new network architectures
D. To increase server load
Answer: B
Explanation:
Penetration testing aims to uncover vulnerabilities before attackers exploit them. This
proactive approach strengthens an organization’s security posture.
st
io
ns
an
d
A
ch
ie
ve
E
xc
el
le
nt
S
co
re
s
2.Which of the following best describes ethical hacking?
A. Unauthorized access to test systems
B. Permission-based testing to improve security
C. Using malware to compromise a system
D. Exploiting systems for financial gain
Answer: B
Explanation:
Ethical hacking involves authorized attempts to find vulnerabilities, always with prior
consent, to improve the system's defenses against real attackers.
S
tu
dy
w
it
h
K
ill
te
st
15
6-
40
1
E
xa
m
Q
ue
3.Which type of hacker is typically motivated by financial gain and operates illegally?
A. White Hat
B. Black Hat
C. Gray Hat
D. Red Hat
Answer: B
Explanation:
Black Hat hackers exploit vulnerabilities illegally for personal or financial gain without
permission from the system owner.
4.Which two are characteristics of a White Hat hacker? (Choose two.)
A. Operates illegally
B. Works with permission
C. Improves system security
D. Focuses solely on personal gain
Answer: B, C
Explanation:
White Hat hackers are authorized security professionals who test and improve system
defenses without malicious intent.
5.What is the first step in the penetration testing process?
A. Exploitation
B. Reporting
C. Reconnaissance
D. Privilege Escalation
Answer: C
Explanation:
Reconnaissance is the first phase where information is gathered about the target,
providing a basis for identifying potential vulnerabilities.
Q
ue
st
io
ns
an
d
A
ch
ie
ve
E
xc
el
le
nt
S
co
re
s
6.Which of the following best defines reconnaissance in ethical hacking?
A. Exploiting discovered vulnerabilities
B. Gathering information without alerting the target
C. Gaining unauthorized access
D. Launching denial of service attacks
Answer: B
Explanation:
Reconnaissance involves discreetly gathering data about a target to prepare for later
exploitation, often through public or semi-public sources.
S
tu
dy
w
it
h
K
ill
te
st
15
6-
40
1
E
xa
m
7.Gray Hat hackers operate:
A. Completely legally and with authorization
B. Without any regard for laws or ethics
C. Without permission but without malicious intent
D. Exclusively for personal revenge
Answer: C
Explanation:
Gray Hat hackers find vulnerabilities without authorization but generally inform the
organization without exploiting the vulnerabilities maliciously.
8.Which two activities are part of the post-exploitation phase? (Choose two.)
A. Initial scanning
B. Installing backdoors
C. Elevating privileges
D. Gathering publicly available data
Answer: B, C
Explanation:
Post-exploitation includes maintaining access through backdoors and escalating
privileges for broader system control.
S
co
re
s
9.Which hacker type is often employed by governments for defensive cyber
operations?
A. Gray Hat
B. Black Hat
C. White Hat
D. Blue Hat
Answer: C
Explanation:
White Hat hackers are frequently hired by governments and corporations to perform
ethical hacking and security testing.
E
xa
m
Q
ue
st
io
ns
an
d
A
ch
ie
ve
E
xc
el
le
nt
10.Which of the following tools is primarily used during the reconnaissance phase?
A. Metasploit
B. Wireshark
C. theHarvester
D. Hydra
Answer: C
Explanation:
theHarvester is used during reconnaissance to gather emails, domains, and IP
information from public sources.
S
tu
dy
w
it
h
K
ill
te
st
15
6-
40
1
11.Penetration testing is important because it:
A. Decreases network visibility
B. Improves system resilience against attacks
C. Increases firewall vulnerabilities
D. Randomly creates system outages
Answer: B
Explanation:
Penetration testing identifies and fixes vulnerabilities, thereby improving the
organization's resilience to cyberattacks.
12.Which two are common outcomes of an effective penetration test? (Choose two.)
A. Strengthened security posture
B. Intentional data breaches
C. Comprehensive vulnerability report
D. Increased malware infections
Answer: A, C
Explanation:
An effective penetration test provides a detailed report highlighting vulnerabilities and
leads to a stronger security posture.
E
xc
el
le
nt
S
co
re
s
13.In penetration testing, the phase where vulnerabilities are actively exploited is
known as:
A. Scanning
B. Post-exploitation
C. Reporting
D. Gaining Access
Answer: D
Explanation:
"Gaining Access" is the phase where vulnerabilities discovered during earlier phases
are exploited to breach the target system.
15
6-
40
1
E
xa
m
Q
ue
st
io
ns
an
d
A
ch
ie
ve
14.Which organization often sets ethical standards for ethical hackers?
A. W3C
B. IEEE
C. EC-Council
D. IETF
Answer: C
Explanation:
EC-Council is responsible for certifications like CEH and sets guidelines for ethical
hacking practices worldwide.
S
tu
dy
w
it
h
K
ill
te
st
15.What is NOT a key concept of ethical hacking?
A. Authorization
B. Confidentiality
C. Notification of clients
D. Exploiting systems for financial gain
Answer: D
Explanation:
Ethical hacking is performed with permission and aims to protect client assets, not
exploit them for personal gain.
16.Which tool is commonly used for password cracking during penetration testing?
A. John the Ripper
B. Wireshark
C. Burp Suite
D. Nessus
Answer: A
Explanation:
John the Ripper is a widely used tool to crack passwords, especially during
exploitation and post-exploitation phases.
E
xc
el
le
nt
S
co
re
s
17.What is the final phase in the penetration testing methodology?
A. Exploitation
B. Reporting
C. Gaining Access
D. Scanning
Answer: B
Explanation:
Reporting is the last phase, where all findings are compiled into a detailed report for
the client.
te
st
15
6-
40
1
E
xa
m
Q
ue
st
io
ns
an
d
A
ch
ie
ve
18.Which two best practices should ethical hackers always follow? (Choose two.)
A. Operate without consent
B. Obtain written authorization
C. Document all findings
D. Ignore discovered vulnerabilities
Answer: B, C
Explanation:
Ethical hackers must always operate with documented permission and thoroughly
report their findings to maintain trust and legality.
S
tu
dy
w
it
h
K
ill
19.What distinguishes a Black Hat hacker from a Gray Hat hacker?
A. Gray Hats inform organizations after exploitation
B. Black Hats operate with permission
C. Gray Hats exploit vulnerabilities for financial gain
D. Black Hats only find vulnerabilities without exploiting
Answer: A
Explanation:
Gray Hats often find and report vulnerabilities without permission, while Black Hats
exploit vulnerabilities illegally for gain.
20.Which statement best describes penetration testing?
A. Causing intentional harm to systems
B. An unstructured hacking attempt
C. A systematic attempt to find and exploit vulnerabilities
D. Creating and spreading malware
Answer: C
Explanation:
Penetration testing is a structured and methodical process aimed at finding and safely
exploiting vulnerabilities in a system.
ie
ve
E
xc
el
le
nt
S
co
re
s
21.Which law makes unauthorized access to computers illegal in the United States?
A. GDPR
B. CFAA (Computer Fraud and Abuse Act)
C. DMCA
D. HIPAA
Answer: B
Explanation:
The Computer Fraud and Abuse Act (CFAA) criminalizes unauthorized access to
computer systems in the United States to protect sensitive data.
K
ill
te
st
15
6-
40
1
E
xa
m
Q
ue
st
io
ns
an
d
A
ch
22.Before conducting a penetration test, a tester must always:
A. Start scanning immediately
B. Obtain written authorization
C. Hack the system anonymously
D. Use malware for testing
Answer: B
Explanation:
Ethical penetration testing always requires explicit written authorization to avoid legal
consequences and to define the scope.
S
tu
dy
w
it
h
23.Which two elements should a penetration testing contract include? (Choose two.)
A. Scope of testing
B. Permission to attack unrelated systems
C. Confidentiality agreement
D. Guarantee of data loss
Answer: A, C
Explanation:
A contract must clearly define the scope to avoid legal issues and include
confidentiality agreements to protect sensitive information.
24.Which organization enforces GDPR compliance?
A. NSA
B. European Data Protection Authorities
C. ISO
D. IETF
Answer: B
Explanation:
GDPR is enforced by European Data Protection Authorities to ensure the lawful
processing and protection of personal data.
an
d
A
ch
ie
ve
E
xc
el
le
nt
S
co
re
s
25.During which phase of a penetration test do testers exploit discovered
vulnerabilities?
A. Scanning
B. Gaining Access
C. Reporting
D. Reconnaissance
Answer: B
Explanation:
In the Gaining Access phase, penetration testers actively exploit the vulnerabilities
discovered during earlier scanning phases.
S
tu
dy
w
it
h
K
ill
te
st
15
6-
40
1
E
xa
m
Q
ue
st
io
ns
26.Which phase of a penetration test involves gathering public information about a
target?
A. Gaining Access
B. Reconnaissance
C. Scanning
D. Covering Tracks
Answer: B
Explanation:
Reconnaissance focuses on gathering intelligence about the target without engaging
directly with its systems.
27.In penetration testing, what is the primary purpose of maintaining access?
A. Gathering more information post-exploitation
B. Escalating privileges on first entry
C. Informing the client immediately
D. Deleting system logs
Answer: A
Explanation:
Maintaining access ensures that the penetration tester can continue gathering
intelligence and simulate an attacker’s behavior over time.
28.Which two actions happen during the scanning phase? (Choose two.)
A. Banner grabbing
B. Password cracking
C. Port scanning
D. Persistence installation
Answer: A, C
Explanation:
Scanning includes techniques like banner grabbing to identify software versions and
port scanning to detect open services.
st
io
ns
an
d
A
ch
ie
ve
E
xc
el
le
nt
S
co
re
s
29.Which of the following is a standard penetration testing methodology?
A. OSCP
B. OWASP Testing Guide
C. GDPR
D. HIPAA
Answer: B
Explanation:
The OWASP Testing Guide outlines best practices for penetration testing, especially
in the context of web application security.
S
tu
dy
w
it
h
K
ill
te
st
15
6-
40
1
E
xa
m
Q
ue
30.Which two goals are primary in penetration testing? (Choose two.)
A. Discover vulnerabilities
B. Obtain financial rewards
C. Test system defenses
D. Leak sensitive data
Answer: A, C
Explanation:
Penetration testing focuses on identifying vulnerabilities and testing the effectiveness
of existing security controls.
31.A penetration tester should ensure which of the following before starting a test?
A. They own the target
B. Written consent is obtained
C. Antivirus is disabled
D. Logs are pre-deleted
Answer: B
Explanation:
Always operate under written permission to protect both the client and the tester
legally.
32.What is the final step in a penetration test?
A. Escalating privileges
B. Gaining persistence
C. Writing and delivering the report
D. Erasing traces
Answer: C
Explanation:
After all activities are completed, a penetration tester must document findings and
deliver a professional report.
Q
ue
st
io
ns
an
d
A
ch
ie
ve
E
xc
el
le
nt
S
co
re
s
33.Which tool is best suited for vulnerability scanning?
A. Burp Suite
B. Nmap
C. OpenVAS
D. Wireshark
Answer: C
Explanation:
OpenVAS is a popular open-source tool specifically designed for comprehensive
vulnerability scanning across networks and systems.
S
tu
dy
w
it
h
K
ill
te
st
15
6-
40
1
E
xa
m
34.What does the "rules of engagement" document define?
A. Attack techniques
B. Legal consequences
C. Scope, time, and methods of testing
D. Payment structure
Answer: C
Explanation:
Rules of engagement outline the authorized targets, time windows, and permissible
testing techniques to avoid misunderstandings.
35.Which two tools are commonly used during the exploitation phase? (Choose two.)
A. Metasploit
B. Nessus
C. John the Ripper
D. Nikto
Answer: A, C
Explanation:
Metasploit facilitates exploits, and John the Ripper is used for password cracking
during or after successful exploitation.
re
s
36.Which protocol is targeted during ARP spoofing attacks?
A. TCP
B. DNS
C. ARP
D. HTTP
Answer: C
Explanation:
ARP spoofing manipulates Address Resolution Protocol tables to redirect traffic
through a malicious actor’s device.
E
xa
m
Q
ue
st
io
ns
an
d
A
ch
ie
ve
E
xc
el
le
nt
S
co
37.What is one major reason penetration testing improves an organization’s
information security posture?
A. It guarantees perfect protection
B. It identifies potential weaknesses before real attacks
C. It improves public relations
D. It reduces legal obligations
Answer: B
Explanation:
Penetration testing helps organizations discover and fix vulnerabilities before
malicious attackers exploit them.
S
tu
dy
w
it
h
K
ill
te
st
15
6-
40
1
38.Which two are common outputs after a penetration test? (Choose two.)
A. Security awareness training
B. Incident response activation
C. Vulnerability report
D. Remediation recommendations
Answer: C, D
Explanation:
After a pen test, organizations receive vulnerability reports and actionable remediation
recommendations to strengthen security.
39.Which tool is best used for capturing and analyzing network traffic?
A. Metasploit
B. OpenVAS
C. Wireshark
D. Nikto
Answer: C
Explanation:
Wireshark is a network protocol analyzer that captures and dissects network traffic for
in-depth analysis.
nt
S
co
re
s
40.Penetration testing should ideally be conducted:
A. Only after a breach
B. On a regular schedule
C. Only during system downtime
D. Without alerting system administrators
Answer: B
Explanation:
Regular penetration tests ensure continuous security monitoring and help
organizations proactively address emerging threats.
15
6-
40
1
E
xa
m
Q
ue
st
io
ns
an
d
A
ch
ie
ve
E
xc
el
le
41.Which of the following best describes reconnaissance in penetration testing?
A. Exploiting system vulnerabilities
B. Gathering information about the target
C. Installing malware on target devices
D. Covering attack traces
Answer: B
Explanation:
Reconnaissance is the phase where the tester gathers as much information as
possible about the target
without engaging in active attacks.
S
tu
dy
w
it
h
K
ill
te
st
42.What is passive reconnaissance?
A. Directly probing systems for vulnerabilities
B. Gathering information without direct interaction
C. Launching exploits against discovered services
D. Cracking passwords remotely
Answer: B
Explanation:
Passive reconnaissance involves collecting information about a target without any
direct engagement, keeping the process undetectable.
43.Which two tools are commonly used for passive footprinting? (Choose two.)
A. Whois
B. Netcat
C. Nslookup
D. Metasploit
Answer: A, C
Explanation:
Whois and Nslookup are passive tools used to gather information like domain
registration and DNS records without alerting the target.
E
xc
el
le
nt
S
co
re
s
44.Which of the following is an example of active reconnaissance?
A. Querying a public Whois database
B. Performing a DNS zone transfer
C. Reading publicly available news articles
D. Searching LinkedIn for employee names
Answer: B
Explanation:
Active reconnaissance involves interacting directly with the target’s systems, such as
attempting a DNS zone transfer.
S
tu
dy
w
it
h
K
ill
te
st
15
6-
40
1
E
xa
m
Q
ue
st
io
ns
an
d
A
ch
ie
ve
45.What information can Whois provide?
A. Open ports
B. Domain registration details
C. Active network sessions
D. Current open vulnerabilities
Answer: B
Explanation:
Whois provides domain ownership, registrar information, and contact details, which
are useful for planning further reconnaissance.
Get full version of
156-401 Q&As
Powered by TCPDF (www.tcpdf.org)