Skip to content

KCS Kairos Learn

Courses Glossary Search Review 繁體中文

CEH learning map

Course overview M01Introduction to Ethical Hacking M02Footprinting and Reconnaissance M03Scanning Networks M04Enumeration M05Vulnerability Analysis M06System Hacking M07Malware Threats M08Sniffing M09Social Engineering M10Denial-of-Service M11Session Hijacking M12Evading IDS, Firewalls, and Honeypots M13Hacking Web Servers M14Hacking Web Applications M15SQL Injection M16Hacking Wireless Networks M17Hacking Mobile Platforms M18IoT and OT Hacking M19Cloud Computing M20Cryptography

Courses/CEH v13/M01

CS KAIROS · LEARNING LIBRARY

M01 · Introduction to Ethical Hacking · Q&A

Check understanding with original scenarios and a reason for every option. These answers do not establish exam or practical readiness.

Scenario questions

ceh-m01-scope-q1 · Original practice

Authorization covers only staging, which redirects to an unlisted service. What next?

Authorization covers only staging, which redirects to an unlisted service. What next? A. Follow it because the redirect is automaticB. Stop that action and confirm scopeC. Test it as long as you do not log inD. Mark both domains as verified

Confidence

JavaScript is off: read the answer and explanation

B

A redirect is a technical action, not an extension of permission.
The new target is not authorized; confirm before testing.
Unauthenticated requests can still be out of scope.
There is no verification evidence for an untested asset.

ceh-m01-scope-q2 · Original practice

Which ROE statement best prevents execution ambiguity?

Which ROE statement best prevents execution ambiguity? A. Please be safeB. Test our websiteC. Name hosts, actions, window, prohibitions and contactD. Use tool defaults as the scope

Confidence

JavaScript is off: read the answer and explanation

C

The intention is useful but lacks decision boundaries.
The assets and methods remain unclear.
Checkable fields tell the operator when to act or stop.
Tool settings do not represent the asset owner’s permission.

ceh-m01-scope-q3 · Original practice

After seeing possible personal data, which record is most appropriate?

After seeing possible personal data, which record is most appropriate? A. Record necessary clues, stop and report as agreedB. Download everything to prove severityC. Delete all records to avoid troubleD. Declare the entire system compromised

Confidence

JavaScript is off: read the answer and explanation

A

Minimal evidence and the agreed stop rule support follow-up handling.
Bulk downloading can increase exposure and exceed permission.
Arbitrary deletion removes the evidence needed to reconstruct the response.
One observation does not establish full system compromise.

ceh-m01-cia-q1 · Original practice

Data is accidentally altered but remains downloadable. Which goal is primarily affected?

Data is accidentally altered but remains downloadable. Which goal is primarily affected? A. Confidentiality onlyB. IntegrityC. Necessarily availabilityD. None of the three can be affected

Confidence

JavaScript is off: read the answer and explanation

B

The scenario supplies no evidence of unauthorized disclosure.
Improper modification compromises the content.
Downloadability is not a complete availability assessment, but the main evidence here concerns alteration.
The stated erroneous change affects integrity.

ceh-m01-cia-q2 · Original practice

A file and digest are downloaded from the same untrusted location and match. What can you conclude?

A file and digest are downloaded from the same untrusted location and match. What can you conclude? A. The sender is authenticatedB. The contents must be correctC. The file matches that digest, but its trusted origin is unestablishedD. The file is encrypted

Confidence

JavaScript is off: read the answer and explanation

C

An ordinary hash does not authenticate origin.
Incorrect or malicious content also has a digest.
Matching establishes consistency; the reference may also have been replaced.
Hash comparison is not reversible encryption.

ceh-m01-cia-q3 · Original practice

A backup exists, but restore has never been tested. Which statement is most accurate?

A backup exists, but restore has never been tested. Which statement is most accurate? A. A backup is stored; recovery capability remains unverifiedB. Availability is fully guaranteedC. Backups cannot support availabilityD. The original data can be deleted immediately

Confidence

JavaScript is off: read the answer and explanation

A

Storage and successful restoration are different evidence layers.
Existence does not establish usability, completeness or timely recovery.
Verified backups and recovery processes can support availability.
No validation or authorization supports deleting the original.

Continue to safe practice →

CS Kairos Research and learning, built over time.

Teaching & main site Content principles GitHub