Check Point 156-401 Practice Exams
Last updated on Oct 22,2026- Exam Code: 156-401
- Exam Name: Hacking 101 Check Point Certified PenTesting Associate (CCPA)
- Certification Provider: Check Point
- Latest update: Oct 22,2026
Question #11
Which two are examples of enumeration activities? (Choose two.)
- A . Retrieving user names from a Windows machine
- B . Checking if port 443 is open
- C . Listing shared folders on a network
- D . Mapping firewall rules
Correct Answer: A, C
A, C
Explanation:
Enumeration involves gathering detailed network resource information like shared directories and user accounts after initial scanning.
A, C
Explanation:
Enumeration involves gathering detailed network resource information like shared directories and user accounts after initial scanning.
Question #12
Which two options describe a banner grabbing purpose? (Choose two.)
- A . Retrieve server software versions
- B . Hide server details
- C . Identify potential attack vectors
- D . Flood the server with data
Correct Answer: A, C
A, C
Explanation:
Banner grabbing reveals server information such as software versions, helping to identify attack opportunities.
A, C
Explanation:
Banner grabbing reveals server information such as software versions, helping to identify attack opportunities.
Question #13
Netcraft provides information about:
- A . Network firewall configurations
- B . Web server technologies and hosting details
- C . Password policies
- D . VPN tunnels
Correct Answer: B
B
Explanation:
Netcraft allows security professionals to find out details about web hosting providers, server types, and operating systems.
B
Explanation:
Netcraft allows security professionals to find out details about web hosting providers, server types, and operating systems.
Question #14
Which information can be gathered through a successful banner grab?
- A . System uptime
- B . Service type and version
- C . Disk usage statistics
- D . CPU utilization
Correct Answer: B
B
Explanation:
A banner grab reveals the type and version of a service running on a particular port, aiding in vulnerability assessment.
B
Explanation:
A banner grab reveals the type and version of a service running on a particular port, aiding in vulnerability assessment.
Question #15
Which of the following is a standard penetration testing methodology?
- A . OSCP
- B . OWASP Testing Guide
- C . GDPR
- D . HIPAA
Correct Answer: B
B
Explanation:
The OWASP Testing Guide outlines best practices for penetration testing, especially in the context of web application security.
B
Explanation:
The OWASP Testing Guide outlines best practices for penetration testing, especially in the context of web application security.
Question #16
Which tool can help identify known vulnerabilities in network services?
- A . Wireshark
- B . Netcat
- C . OpenVAS
- D . Nmap
Correct Answer: C
C
Explanation:
OpenVAS is an open-source vulnerability scanner that detects known flaws in network services, helping prioritize security patches.
C
Explanation:
OpenVAS is an open-source vulnerability scanner that detects known flaws in network services, helping prioritize security patches.
Question #17
When scanning a system, an open port 445 typically indicates:
- A . HTTP service
- B . SSH service
- C . SMB service
- D . DNS service
Correct Answer: C
C
Explanation:
Port 445 is used by the SMB protocol for file sharing and network communication on Windows systems, often a key enumeration target.
C
Explanation:
Port 445 is used by the SMB protocol for file sharing and network communication on Windows systems, often a key enumeration target.
Question #18
Web crawling during reconnaissance primarily helps to:
- A . Crack passwords
- B . Map the structure of a website
- C . Attack login portals
- D . Exploit web server vulnerabilities
Correct Answer: B
B
Explanation:
Web crawling helps discover directories, files, and links in a website, building a full view of its accessible structure.
B
Explanation:
Web crawling helps discover directories, files, and links in a website, building a full view of its accessible structure.
Question #19
DNS zone transfer allows a tester to:
- A . Crash the DNS server
- B . Collect complete DNS information
- C . Encrypt DNS records
- D . Create new domain names
Correct Answer: B
B
Explanation:
If misconfigured, a DNS server may allow zone transfers that expose internal DNS records, helping attackers map the network.
B
Explanation:
If misconfigured, a DNS server may allow zone transfers that expose internal DNS records, helping attackers map the network.
Question #20
Which protocol is targeted during ARP spoofing attacks?
- A . TCP
- B . DNS
- C . ARP
- D . HTTP
Correct Answer: C
C
Explanation:
ARP spoofing manipulates Address Resolution Protocol tables to redirect traffic through a malicious actor’s device.
C
Explanation:
ARP spoofing manipulates Address Resolution Protocol tables to redirect traffic through a malicious actor’s device.