Ethical Hacking Case Study Quiz

1. What is the main role of CyberHealth Security in the case study?

To install new software systems. To perform ethical hacking and assess MTPH’s cybersecurity. To manage hospital records.

2. How many phases are there in the PTES framework?

5 6 7

3. What is the key difference between black box and white box testing?

Black box has full system access; white box has none. Black box has no internal access; white box has full system knowledge. They are both identical in approach.

4. Which of the following is an example of OSINT?

Using malware. Analyzing public social media posts. Privilege escalation.

5. Who are considered potential adversaries in the threat modelling phase?

Only internal staff. Cybercriminals and insiders with access. Only external hackers.

6. What is the goal of the vulnerability analysis phase?

To write a final report. To detect and prioritize system weaknesses. To escalate user privileges.

7. Which of the following is a technique used during the exploitation phase?

SQL Injection Data backup Antivirus installation

8. What does the post-exploitation phase analyze?

Physical hospital safety. Impact and persistence of system breaches. System hardware upgrades.

9. What is a key component of the final report?

Antivirus installation plans. Security posture assessment and recommendations. Employee evaluations.

10. Which of the following is an ethical consideration in penetration testing?

Ignoring disruptions during testing. Ensuring data confidentiality and proper authorization. Gaining access without informing stakeholders.