MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Overall MCQs for Reference

1. In port scanning, a port is always associated with the _____________ (typically of host system) & the type of ____________ employed for communication.
   a. IP address, protocol
   b. MAC address, protocol
   c. IP address, IMEI number
   d. MAC address, network model
   Answer: a. IP address, protocolsanfoundry
2. Which tool uses traceroute-like techniques for analyzing IP packet responses?
   a. Firewalk
   b. Firesweep
   c. PingSweeper
   d. ICMPwalker
   Answer: a. Firewalksanfoundry
3. Which flag combination is sent during an Xmas Tree scan using nmap?
   a. FIN
   b. FIN, PSH
   c. PSH, URG
   d. FIN, PSH, URG
   Answer: d. FIN, PSH, URGwayground
4. A FIN packet sent to a closed port responds with which of the following packets?
   a. FIN
   b. ACK
   c. RST
   d. SYN
   Answer: c. RSTwayground
5. Which of the following is NOT a scanning methodology?
   a. Check for live systems
   b. Check for open ports
   c. Identifying the malware in the system
   d. Identifying services
   Answer: c. Identifying the malware in the systemwayground
6. What scanning technique is used to determine which range of IP addresses map to live hosts?
   a. Scan sweep
   b. Ping sweep
   c. Scan ping
   d. Host ping
   Answer: b. Ping sweepwayground
7. Using a 3-way handshake, it is possible to check for open ports.
   a. True
   b. False
   Answer: a. Trueionos+1
8. How many standard flags are used in TCP communication?
   a. 4
   b. 5
   c. 6
   d. 7
   Answer: c. 6wayground
9. The nmap command -sT -p- 192.168.2.64 executes which type of port scan?
   a. Stealth Scan
   b. Xmas Tree Scan
   c. TCP Connect Scan
   d. TCP Half-Open Scan
   Answer: c. TCP Connect Scanwayground
10. What is the maximum number of TCP/UDP ports?
    a. 65000
    b. 65335
    c. 65525
    d. 65535
    Answer: d. 65535wayground
11. Which port scanning method attempts to establish a full TCP connection?
    a. SYN Scan
    b. ACK Scan
    c. TCP Connect Scan
    d. NULL Scan
    Answer: c. TCP Connect Scannmap
12. What does a closed port return when contacted in a TCP-SYN scan?
    a. SYN/ACK packet
    b. RST packet
    c. ACK packet
    d. No response
    Answer: b. RST packetionos
13. Which scan sets no TCP flags in the packet header?
    a. SYN Scan
    b. ACK Scan
    c. NULL Scan
    d. Xmas Scan
    Answer: c. NULL Scansanfoundry
14. Which tool is a command-line TCP/IP packet assembler and analyzer?
    a. IGMP Ping
    b. Hping2
    c. Nmap
    d. Maltego
    Answer: b. Hping2sanfoundry
15. Which of the following is not a feature of the Hping2 tool?
    a. Firewall testing
    b. Port scanning
    c. Network testing
    d. Server malware scanning
    Answer: d. Server malware scanningsanfoundry
16. What is port knocking primarily used for?
    a. Preventing session creation
    b. Detecting malware
    c. Monitoring networks
    d. Exploiting vulnerabilities
    Answer: a. Preventing session creationsanfoundry
17. Which among the following is NOT a network scanner?
    a. NMAP
    b. Qualys
    c. SoftPerfect
    d. Netcat
    Answer: d. Netcatsanfoundry
18. Which is NOT a port scanning tool?
    a. Netcat
    b. Unicornscan
    c. Maltego
    d. Angry IP Scanner
    Answer: c. Maltegosanfoundry
19. Which of the following is NOT a vulnerability scanning tool?
    a. Nexpose
    b. Nessus Professional
    c. Snort
    d. Nikto Web scanner
    Answer: c. Snortsanfoundry
20. Port scanning is mostly performed during which attack phase?
    a. Enumeration
    b. Reconnaissance
    c. Exploitation
    d. Post-exploitation
    Answer: b. Reconnaissancevaronis
21. Which port state indicates the port is accepting connections?
    a. Filtered
    b. Open
    c. Closed
    d. Stealthed
    Answer: b. Openvaronis
22. Which answer best describes why attackers perform port scanning?
    a. To disrupt services
    b. To identify open ports and running services
    c. To update firewalls
    d. To protect systems
    Answer: b. To identify open ports and running servicesfortinet
23. Which Nmap scan is least detectable by the target system?
    a. TCP Connect Scan
    b. SYN Scan
    c. UDP Scan
    d. ICMP Scan
    Answer: b. SYN Scanionos
24. Which port scan type uses only ACK flag in packets?
    a. SYN Scan
    b. FIN Scan
    c. ACK Scan
    d. NULL Scan
    Answer: c. ACK Scansanfoundry
25. Which tool is the most popular for port scanning?
    a. Angry IP Scanner
    b. Wireshark
    c. Netcat
    d. Nessus
    Answer: a. Angry IP Scannertheknowledgeacademy
26. What does a filtered port imply?
    a. Open service
    b. No traffic allowed
    c. Blocked by firewall or packet filter
    d. Vulnerable service
    Answer: c. Blocked by firewall or packet filtervaronis
27. TCP ports from 1024–49151 are called:
    a. Registered Ports
    b. Well-known Ports
    c. Dynamic Ports
    d. Private Ports
    Answer: a. Registered Portsvaronis
28. What port number does HTTP use?
    a. 20
    b. 21
    c. 22
    d. 80
    Answer: d. 80varonis
29. Which scan can be used to bypass firewalls by using fragmented IP packets?
    a. XMAS Scan
    b. Fragmented Packet Scan
    c. FIN Scan
    d. NULL Scan
    Answer: b. Fragmented Packet Scanscribd
30. What tool can perform both ping sweeps and port scanning?
    a. Maltego
    b. Fping
    c. Nessus
    d. Nmap
    Answer: d. Nmapcoursehero
31. Which of the following best describes a stealth scan?
    a. Does not complete TCP connections
    b. Uses ARP packets
    c. Uses UDP packets only
    d. Blocks responses from server
    Answer: a. Does not complete TCP connectionsionos
32. Which ICMP message type indicates a host is unreachable?
    a. Type 3
    b. Type 5
    c. Type 7
    d. Type 6
    Answer: a. Type 3scribd
33. What signifies an open UDP port?
    a. No response or a specific application response
    b. TCP SYN/ACK response
    c. Reset response
    d. Filtered by default
    Answer: a. No response or a specific application responsew3schools
34. What does the Nmap option -sU stand for?
    a. TCP Scan
    b. UDP Scan
    c. ARP Scan
    d. ICMP Scan
    Answer: b. UDP Scansanfoundry
35. In a TCP 3-way handshake, which packet is sent first?
    a. SYN
    b. SYN/ACK
    c. ACK
    d. FIN
    Answer: a. SYNionos
36. What is the initial step in using a vulnerability scanner on a network?
    a. TCP/UDP Port scanning
    b. OS detection
    c. Firewall detection
    d. Service fingerprinting
    Answer: a. TCP/UDP Port scanningyeahhub
37. Which tool offers a GUI front end for port scanning?
    a. Angry IP Scanner
    b. Netcat
    c. Fping
    d. Maltego
    Answer: a. Angry IP Scannertheknowledgeacademy
38. Which type of scan sets the FIN, PSH, and URG flags?
    a. NULL Scan
    b. Xmas Tree Scan
    c. SYN Scan
    d. ACK Scan
    Answer: b. Xmas Tree Scancoursehero
39. How does a closed port typically respond to a NULL scan?
    a. No response
    b. SYN/ACK
    c. RST
    d. FIN
    Answer: c. RSTcoursehero
40. Which port scanner can bypass simple filtering devices by injecting crafted packets?
    a. Nmap
    b. Maltego
    c. Hping
    d. Qualys
    Answer: c. Hpingcoursehero
41. Which flag must be set to initiate a TCP connection?
    a. SYN
    b. ACK
    c. RST
    d. PSH
    Answer: a. SYNionos
42. Which option performs a half-open scan with Nmap?
    a. -sS
    b. -sT
    c. -sU
    d. -sA
    Answer: a. -sSnmap
43. Why might a port return “filtered” instead of “closed” in a scan?
    a. Port is protected by a firewall or packet filter
    b. Port is open
    c. Port responds to all requests
    d. Service is running with no vulnerabilities
    Answer: a. Port is protected by a firewall or packet filterionos
44. Port scanning works by sending packets to an application and looking for replies. This is exceptionally easy for which protocol?
    a. UDP
    b. TCP
    c. ICMP
    d. ARP
    Answer: b. TCPw3schools
45. Which scan type sends packets with all TCP flags set?
    a. Xmas Tree scan
    b. SYN scan
    c. NULL scan
    d. FIN scan
    Answer: a. Xmas Tree scancoursehero
46. What is the first 1023 TCP ports set aside for?
    a. Dynamic assignment
    b. Well-known services/applications
    c. Ephemeral processes
    d. No assignment
    Answer: b. Well-known services/applicationsvaronis
47. Which command can be used for a TCP Connect scan in Nmap?
    a. nmap -sS
    b. nmap -sU
    c. nmap -sT
    d. nmap -sA
    Answer: c. nmap -sTwayground
48. What is the main purpose of a port scanner?
    a. To identify open ports and services
    b. To encrypt network traffic
    c. To patch OS
    d. To detect users
    Answer: a. To identify open ports and servicesvinsys
49. Which OS fingerprinting option is provided by Nmap?
    a. -O
    b. -A
    c. -b
    d. -A and -O
    Answer: d. -A and -Onmap
50. Which port scan type is likely to be detected by intrusion detection systems (IDS)?
    a. SYN scan
    b. NULL scan
    c. TCP Connect scan
    d. FIN scan
    Answer: c. TCP Connect scanionos

1. https://www.sanfoundry.com/cyber-security-questions-bank/
2. https://wayground.com/admin/quiz/5fc1c95f3a5129001bff7ffa/port-scanning
3. https://www.ionos.com/digitalguide/server/know-how/port-scanning-introduction-and-basics/
4. https://nmap.org/book/man-port-scanning-basics.html
5. https://www.varonis.com/blog/port-scanning-techniques
6. https://www.fortinet.com/resources/cyberglossary/what-is-port-scan
7. https://www.theknowledgeacademy.com/blog/cyber-security-mcq-and-answers/
8. https://www.scribd.com/document/854966040/Cehv12-Mcq-3
9. https://www.coursehero.com/file/80722568/Chapter-5-quizodt/
10. https://www.w3schools.com/cybersecurity/cybersecurity_mapping_port_scanning.php
11. https://www.yeahhub.com/certified-ethical-hacker-v10-multiple-choice-questions-answers-part-3/
12. https://www.vinsys.com/blog/top-30-mcqs-ceh-exam-preparation
13. https://study.com/academy/practice/quiz-worksheet-basics-of-port-scanning-in-hacking.html
14. https://www.sanfoundry.com/cyber-security-questions-answers-ports-types-1/
15. https://www.interviewbit.com/cyber-security-mcq/
16. https://www.paloaltonetworks.com/cyberpedia/what-is-a-port-scan
17. https://www.geeksforgeeks.org/ethical-hacking/port-scan-in-ethical-hacking/
18. https://www.reflectiz.com/blog/everything-to-know-about-port-scanning/