48.7 CEH-Style Practice Questions – Set B (Modules 11–20)

Q26. (Module 11) Which cookie flag helps stop JavaScript on the page from reading the session cookie?

A. Secure only
B. HttpOnly
C. Max-Age=31536000 always
D. Path=/
Answer: B. HttpOnly blocks document.cookie access to that cookie.

Q27. (Module 11) Session cookies on plain HTTP are dangerous because:

A. HTTP is faster forever
B. On-path observers may steal cookies (lab sniff demos)
C. Cookies cannot exist on HTTP
D. TLS forbids cookies
Answer: B. Use HTTPS + Secure.

Q28. (Module 12) A honeypot should be:

A. Bridged straight into production AD with Domain Admin
B. Isolated so compromise cannot pivot into real Sahyadri systems
C. The only firewall rule
D. Disabled logging
Answer: B.

Q29. (Module 12) Slow / fragmented scan ideas exist in attacker literature mainly to:

A. Improve video codecs
B. Attempt to reduce noisy detection – defenders still use layered controls and tuning
C. Replace patching
D. Mint TLS certificates
Answer: B. Awareness only – Blue still wins with layers.

Q30. (Module 13) Outdated Apache/Nginx on a public EIP most clearly maps to:

A. Perfect security
B. Patch / harden web server module risks
C. DNS only
D. Bluetooth pairing
Answer: B. ch07/ch08/ch21 defence: update and harden.

Q31. (Module 13) After changing Nginx config on Amazon Linux lab, a safe habit is:

A. Reboot the hypervisor twice
B. Test config (nginx -t) then sudo service nginx reload or restart as appropriate
C. chmod 777 the entire /etc
D. Disable the access log forever
Answer: B. Prefer sudo service patterns in this book.

Q32. (Module 14) Broken access control / IDOR mainly means:

A. CSS colour wrong
B. Users can reach other users’ objects by changing an identifier without authZ checks
C. Disk full
D. NTP drift
Answer: B.

Q33. (Module 14) A solid XSS defence direction is:

A. Disable all HTTPS
B. Context-appropriate output encoding plus CSP mindset
C. Store passwords in MD5
D. Open Redis to the world
Answer: B.

Q34. (Module 15) The durable fix for classic string-concat SQL injection is:

A. More CSS
B. Prepared statements / parameterised queries
C. Turning off the database
D. Using FTP for queries
Answer: B.

Q35. (Module 15) In exam/interview English, describe SQLi risk without a working payload string:

A. Paste a full real-world exploit chain
B. Say a crafted input can change the WHERE clause logic when concatenated into SQL
C. Refuse to discuss SQLi at all
D. Claim SQLi is fixed by emoji
Answer: B. Conceptual – then name prepared statements.

Q36. (Module 16) Acceptable wireless practice target for students in this book:

A. Airport free Wi-Fi clients
B. An access point / lab router you own or have written permission to test
C. Neighbour’s home SSID
D. Random WPS PINs on the street
Answer: B.

Q37. (Module 16) Guest Wi-Fi isolation helps mainly by:

A. Speeding Netflix on OT PLCs
B. Keeping guest devices from freely reaching internal Raja-Rani POS/LAN segments
C. Disabling WPA3
D. Removing all passwords
Answer: B.

Q38. (Module 17) Sideloading unknown APKs mainly increases risk of:

A. Better battery myths only
B. Malicious apps bypassing store review controls
C. Stronger TLS
D. Automatic Argon2
Answer: B.

Q39. (Module 17) A Blue mobile hygiene list for staff phones should include:

A. No screen lock ever
B. OS/app updates, screen lock, careful permissions, official stores / MDM where used
C. Jailbreak required for email
D. Same root password as the EC2 box
Answer: B.

Q40. (Module 18) Default passwords on internet-facing IP cameras are dangerous because:

A. Cameras cannot stream
B. Attackers worldwide try well-known defaults
C. Defaults enable DMARC
D. Defaults force WPA3
Answer: B. Change defaults; segment.

Q41. (Module 18) Flat IT + OT network without segmentation mainly risks:

A. Faster printing only
B. Office malware/pathways reaching sensitive plant/IoT segments
C. Better bcrypt
D. Automatic cloud backups
Answer: B.

Q42. (Module 19) S3 Block Public Access is a control against:

A. DNS tunnelling only
B. Accidental or malicious public exposure of bucket objects
C. Bluetooth pairing
D. MySQL JOIN syntax
Answer: B.

Q43. (Module 19) Long-lived IAM access keys committed to GitHub are risky because:

A. GitHub blocks all git push
B. Stolen keys can call AWS APIs as that principal until rotated/disabled
C. Keys improve Argon2
D. Keys replace Security Groups
Answer: B. Prefer roles; never commit keys.

Q44. (Module 20) Hashing passwords with MD5 is discouraged because:

A. MD5 is too slow for users
B. MD5 is fast and unsuitable as a modern password-storage scheme; prefer bcrypt/Argon2
C. MD5 forces MFA
D. MD5 is required by TLS 1.3
Answer: B.

Q45. (Module 20) TLS primarily protects data:

A. Only at rest inside MySQL tables always
B. In transit between client and server (confidentiality + integrity of the channel)
C. From bad CSS
D. From disk failure
Answer: B.

Q46. (Short) Module 11: name three cookie-related Blue controls.

Answer: HTTPS, HttpOnly, Secure (and preferably SameSite + short idle timeout + regenerate on login).

Q47. (Short) Module 14: what does CSP help with at a high level?

Answer: Content Security Policy reduces impact of some XSS classes by controlling where scripts/resources may load from (defence-in-depth with encoding).

Q48. (Short) Module 19: one-line shared responsibility idea.

Answer: Cloud provider secures the cloud foundation; the customer must secure identities, data, network config, and applications they place in the cloud.

Q49. (Short) Module 18: one sentence OT safety note for exams.

Answer: OT changes can affect physical processes – prefer segmentation, vendor-approved maintenance windows, and never "test exploits" on live plant gear.

Q50. (Short) Closing ethics line if a question asks you to demonstrate evasion on a client VPN without paper.

Answer: Refuse. Offer OWN-lab methodology discussion or wait for written authorisation and change control.