🎯 Back2Skills CEH Challenge Exam

Q1. Which tool is best for harvesting emails and domains from search engines?

Q2. Searching for sensitive info using queries like filetype:pdf password is called:

Q3. Which Nmap scan performs a “half-open” stealth SYN scan?

Q4. Which Nmap command detects service versions?

Q5. Which protocol is often used to enumerate Windows user accounts?

Q6. Which scanner is widely used in enterprises (paid, cloud-ready)?

Q7. Which tool specializes in web server vulnerabilities?

Q8. Which tool generates custom payloads and shellcode?

Q9. Which attack gains access by systematically guessing passwords?

Q10. Which password cracker is GPU-optimized for speed?

Q11. Malware that encrypts files and demands payment:

Q12. Malware that runs in memory without files:

Q13. Which tool is used for packet capturing and analysis?

Q14. Which attack floods a host with incomplete SYN handshakes?

Q15. SQL Injection that extracts info through error messages:

Q16. Stored (persistent) XSS means:

Q17. Which tool automates SQL Injection testing?

Q18. Capturing a WPA2-PSK handshake is done with:

Q19. Remote Access Trojan for Android:

Q20. Evil PLC attacks target:

Q21. COSMICENERGY malware targets:

Q22. Which hashing algorithm is broken and unsafe?

Q23. Attack that uses precomputed hash tables:

Q24. Which protocol ensures confidentiality for email?

Q25. Common cloud vulnerability:

Q26. Which provider offers GuardDuty (cloud IDS)?

Q27. AI tool creating realistic phishing (voice, video, text):

Q28. AI-based tool for automated exploitation:

Q29. CEH covers:

Q30. Final stage of ethical hacking methodology: