Check Point 156-401 Practice Exams
Last updated on Oct 22,2026- Exam Code: 156-401
- Exam Name: Hacking 101 Check Point Certified PenTesting Associate (CCPA)
- Certification Provider: Check Point
- Latest update: Oct 22,2026
Question #101
Passive footprinting techniques include:
- A . Banner grabbing
- B . Port scanning
- C . Whois lookups
- D . Vulnerability exploitation
Correct Answer: C
C
Explanation:
Whois lookups gather domain registration data without directly interacting with the target systems, making it a passive method.
C
Explanation:
Whois lookups gather domain registration data without directly interacting with the target systems, making it a passive method.
Question #102
What is the primary objective of penetration testing?
- A . To disrupt network operations
- B . To identify vulnerabilities before malicious actors do
- C . To create new network architectures
- D . To increase server load
Correct Answer: B
B
Explanation:
Penetration testing aims to uncover vulnerabilities before attackers exploit them. This proactive approach strengthens an organization’s security posture.
B
Explanation:
Penetration testing aims to uncover vulnerabilities before attackers exploit them. This proactive approach strengthens an organization’s security posture.
Question #103
What distinguishes a Black Hat hacker from a Gray Hat hacker?
- A . Gray Hats inform organizations after exploitation
- B . Black Hats operate with permission
- C . Gray Hats exploit vulnerabilities for financial gain
- D . Black Hats only find vulnerabilities without exploiting
Correct Answer: A
A
Explanation:
Gray Hats often find and report vulnerabilities without permission, while Black Hats exploit vulnerabilities illegally for gain.
A
Explanation:
Gray Hats often find and report vulnerabilities without permission, while Black Hats exploit vulnerabilities illegally for gain.
Question #104
What is the difference between port scanning and vulnerability scanning?
- A . Port scanning identifies vulnerabilities
- B . Vulnerability scanning identifies vulnerabilities; port scanning finds open ports
- C . Both are identical
- D . Port scanning encrypts ports
Correct Answer: B
B
Explanation:
Port scanning finds open ports; vulnerability scanning checks for known weaknesses in those services.
B
Explanation:
Port scanning finds open ports; vulnerability scanning checks for known weaknesses in those services.
Question #105
Which phase of penetration testing involves identifying live hosts and open ports?
- A . Exploitation
- B . Scanning
- C . Reporting
- D . Reconnaissance
Correct Answer: B
B
Explanation:
Scanning identifies live systems, open ports, and available services, preparing for deeper vulnerability assessment and exploitation.
B
Explanation:
Scanning identifies live systems, open ports, and available services, preparing for deeper vulnerability assessment and exploitation.
Question #106
Which two tools are commonly used for vulnerability scanning? (Choose two.)
- A . OpenVAS
- B . Netcat
- C . Nessus
- D . Wireshark
Correct Answer: A, C
A, C
Explanation:
OpenVAS and Nessus are powerful vulnerability scanners that assess systems for known security weaknesses.
A, C
Explanation:
OpenVAS and Nessus are powerful vulnerability scanners that assess systems for known security weaknesses.
Question #107
Which tool is commonly used for password cracking during penetration testing?
- A . John the Ripper
- B . Wireshark
- C . Burp Suite
- D . Nessus
Correct Answer: A
A
Explanation:
John the Ripper is a widely used tool to crack passwords, especially during exploitation and post-exploitation phases.
A
Explanation:
John the Ripper is a widely used tool to crack passwords, especially during exploitation and post-exploitation phases.
Question #108
Which service provides ownership information for an IP address range?
- A . Whois
- B . Netstat
- C . Traceroute
- D . Wireshark
Correct Answer: A
A
Explanation:
Whois queries reveal ownership and registration information for domains and IP address ranges.
A
Explanation:
Whois queries reveal ownership and registration information for domains and IP address ranges.
Question #109
A penetration tester uses DNS reconnaissance to discover a company’s internal hostnames.
What is the likely next step?
- A . Launching a SQL injection
- B . Crafting targeted phishing emails
- C . Starting password brute-force attacks
- D . Performing network scans
Correct Answer: D
D
Explanation:
After discovering hostnames, testers typically perform network scans to identify open ports and running services on those hosts.
D
Explanation:
After discovering hostnames, testers typically perform network scans to identify open ports and running services on those hosts.
Question #110
Which two resources can be identified during enumeration? (Choose two.)
- A . List of system administrators
- B . Port numbers used by applications
- C . Open service banners
- D . Shared network folders
Correct Answer: A, D
A, D
Explanation:
Enumeration can extract user information (such as system administrators) and available shared resources across the network.
A, D
Explanation:
Enumeration can extract user information (such as system administrators) and available shared resources across the network.