Hands-On Ethical Hacking and Network Defense, 3e, ISBN 9781285454610
Ch. 1 Solutions-1
Chapter 1 Solutions
Review Questions
1. The U.S. Department of Justice defines a hacker as which of the following?
2. A penetration tester is which of the following?
3. Some experienced hackers refer to inexperienced hackers who copy or use prewritten
scripts or programs as which of the following? (Choose all that apply.)
4. What three models do penetration or security testers use to conduct tests?
5. A team composed of people with varied skills who attempt to penetrate a network is
referred to as which of the following?
6. How can you find out which computer crime laws are applicable in your state?
7. What portion of your ISP contract might affect your ability to conduct a penetration
test over the Internet?
8. If you run a program in New York City that uses network resources to the extent that
a user is denied access to them, what type of law have you violated?
9. Which federal law prohibits unauthorized access of classified information?
10. Which federal law prohibits intercepting any communication, regardless of how it
was transmitted?
11. Which federal law amended Chapter 119 of Title 18, U.S. Code?
12. To determine whether scanning is illegal in your area, you should do which of the
following?
13. What organization offers the Certified Ethical Hacker (CEH) certification exam?
14. What organization designates a person as a CISSP?
Hands-On Ethical Hacking and Network Defense, 3e, ISBN 9781285454610
Ch. 1 Solutions-2
15. What is an OSCP?
16. As a security tester, what should you do before installing hacking software on your
computer?
17. Before using hacking software over the Internet, you should contact which of the
following? (Choose all that apply.)
18. Which organization issues the Top 20 list of current network vulnerabilities?
19. A written contract isn’t necessary when a friend recommends a client. True or False?
20. A penetration tester should possess which of the following attributes? (Choose all
that apply.)
a. Good listening skills
Hands-On Activities
Activity 1-3: Identifying Computer Statutes in Your State or Country
Answers will vary. The memo should include state laws that might affect how a penetration test
Activity 1-4: Examining Federal Computer Crime Laws
Answers will vary. The summary should mention some key elements, such as (a)(2)
“…intentionally accesses a computer without authorization or exceeds authorized access, and
Activity 1-5: Understanding a Consulting Contract
Case Projects
Hands-On Ethical Hacking and Network Defense, 3e, ISBN 9781285454610
Ch. 1 Solutions-3
Case Project 1-1: Determining Legal Requirements for Penetration Testing
The report could include the following possible steps:
2. Verify that a contract exists between both companies authorizing you to perform the
penetration test.
Case Project 1-2: Hacktivist at Work
1. Subjective question. Some might reference hacktivisim as civil disobedience.
3. The simple answer is no. Hacking is illegal.