Check Point 156-401 Practice Exams
Last updated on Oct 22,2026- Exam Code: 156-401
- Exam Name: Hacking 101 Check Point Certified PenTesting Associate (CCPA)
- Certification Provider: Check Point
- Latest update: Oct 22,2026
Question #91
Which of the following is an example of passive scanning?
- A . Banner grabbing
- B . SYN scan
- C . Packet sniffing
- D . UDP scanning
Correct Answer: C
C
Explanation:
Packet sniffing listens to network traffic without interacting with the target directly, making it a passive scan method.
C
Explanation:
Packet sniffing listens to network traffic without interacting with the target directly, making it a passive scan method.
Question #92
Which tool can perform both port scanning and OS fingerprinting?
- A . Wireshark
- B . OpenVAS
- C . Nmap
- D . Hydra
Correct Answer: C
C
Explanation:
Nmap performs both tasks: discovering open ports and identifying the underlying operating system through advanced scanning.
C
Explanation:
Nmap performs both tasks: discovering open ports and identifying the underlying operating system through advanced scanning.
Question #93
Which scanning technique attempts to identify active services over UDP?
- A . TCP connect scan
- B . Xmas tree scan
- C . UDP scan
- D . Banner grabbing
Correct Answer: C
C
Explanation:
UDP scans probe open UDP ports and attempt to identify active services without establishing full handshakes, useful for uncovering less-monitored services.
C
Explanation:
UDP scans probe open UDP ports and attempt to identify active services without establishing full handshakes, useful for uncovering less-monitored services.
Question #94
Which scanning technique uses only UDP packets?
- A . SYN scan
- B . Xmas scan
- C . FIN scan
- D . UDP scan
Correct Answer: D
D
Explanation:
UDP scans send UDP packets to discover services that might not be protected by traditional TCP-based defenses.
D
Explanation:
UDP scans send UDP packets to discover services that might not be protected by traditional TCP-based defenses.
Question #95
What method is commonly used in social engineering attacks?
- A . Brute forcing passwords
- B . Sending phishing emails
- C . Running network scans
- D . Exploiting DNS vulnerabilities
Correct Answer: B
B
Explanation:
Sending phishing emails is a popular social engineering technique that tricks targets into revealing sensitive information.
B
Explanation:
Sending phishing emails is a popular social engineering technique that tricks targets into revealing sensitive information.
Question #96
Which two protocols are often targeted during SMB enumeration? (Choose two.)
- A . SMTP
- B . CIFS
- C . NetBIOS
- D . HTTP
Correct Answer: B, C
B, C
Explanation:
SMB enumeration often leverages CIFS and NetBIOS protocols to list shared drives, files, and user information on Windows networks.
B, C
Explanation:
SMB enumeration often leverages CIFS and NetBIOS protocols to list shared drives, files, and user information on Windows networks.
Question #97
Which type of scan sends SYN packets without completing TCP handshakes?
- A . Full connect scan
- B . SYN scan (half-open)
- C . FIN scan
- D . Xmas scan
Correct Answer: B
B
Explanation:
SYN scan sends SYN packets and monitors responses without completing the three-way handshake, reducing detection.
B
Explanation:
SYN scan sends SYN packets and monitors responses without completing the three-way handshake, reducing detection.
Question #98
Which two are examples of information collected through social engineering? (Choose two.)
- A . Employee credentials
- B . Server patch status
- C . Internal phone numbers
- D . Firewall configuration settings
Correct Answer: A, C
A, C
Explanation:
Social engineering commonly targets employee credentials and internal organizational contact details through deception.
A, C
Explanation:
Social engineering commonly targets employee credentials and internal organizational contact details through deception.
Question #99
During which phase of a penetration test do testers exploit discovered vulnerabilities?
- A . Scanning
- B . Gaining Access
- C . Reporting
- D . Reconnaissance
Correct Answer: B
B
Explanation:
In the Gaining Access phase, penetration testers actively exploit the vulnerabilities discovered during earlier scanning phases.
B
Explanation:
In the Gaining Access phase, penetration testers actively exploit the vulnerabilities discovered during earlier scanning phases.
Question #100
Which tool can perform SMB enumeration efficiently?
- A . Enum4linux
- B . OpenVAS
- C . Hydra
- D . Netcat
Correct Answer: A
A
Explanation:
Enum4linux automates the process of gathering information from Windows hosts using SMB, aiding in efficient network resource enumeration.
A
Explanation:
Enum4linux automates the process of gathering information from Windows hosts using SMB, aiding in efficient network resource enumeration.