Check Point 156-401 Practice Exams
Last updated on Oct 22,2026- Exam Code: 156-401
- Exam Name: Hacking 101 Check Point Certified PenTesting Associate (CCPA)
- Certification Provider: Check Point
- Latest update: Oct 22,2026
Question #21
A penetration tester should ensure which of the following before starting a test?
- A . They own the target
- B . Written consent is obtained
- C . Antivirus is disabled
- D . Logs are pre-deleted
Correct Answer: B
B
Explanation:
Always operate under written permission to protect both the client and the tester legally.
B
Explanation:
Always operate under written permission to protect both the client and the tester legally.
Question #22
Which of the following tools is primarily used for network scanning?
- A . Metasploit
- B . Nmap
- C . John the Ripper
- D . Burp Suite
Correct Answer: B
B
Explanation:
Nmap is a widely used tool for performing network discovery, port scanning, and service enumeration across networks.
B
Explanation:
Nmap is a widely used tool for performing network discovery, port scanning, and service enumeration across networks.
Question #23
Which phase of a penetration test involves gathering public information about a target?
- A . Gaining Access
- B . Reconnaissance
- C . Scanning
- D . Covering Tracks
Correct Answer: B
B
Explanation:
Reconnaissance focuses on gathering intelligence about the target without engaging directly with its systems.
B
Explanation:
Reconnaissance focuses on gathering intelligence about the target without engaging directly with its systems.
Question #24
Which reconnaissance technique focuses on using automated scripts to collect metadata and files?
- A . DNS tunneling
- B . Directory traversal
- C . Web crawling
- D . ARP poisoning
Correct Answer: C
C
Explanation:
Web crawlers automate browsing of websites to collect metadata, hidden links, and other useful information.
C
Explanation:
Web crawlers automate browsing of websites to collect metadata, hidden links, and other useful information.
Question #25
What is the final step in a penetration test?
- A . Escalating privileges
- B . Gaining persistence
- C . Writing and delivering the report
- D . Erasing traces
Correct Answer: C
C
Explanation:
After all activities are completed, a penetration tester must document findings and deliver a professional report.
C
Explanation:
After all activities are completed, a penetration tester must document findings and deliver a professional report.
Question #26
Port scanning helps in:
- A . Identifying user passwords
- B . Determining network topology
- C . Discovering open ports and running services
- D . Encrypting data in transit
Correct Answer: C
C
Explanation:
Port scanning identifies which network ports are open and what services are available, critical for planning targeted attacks.
C
Explanation:
Port scanning identifies which network ports are open and what services are available, critical for planning targeted attacks.
Question #27
Which of the following best defines social engineering during reconnaissance?
- A . Guessing passwords manually
- B . Manipulating people to gain confidential information
- C . Exploiting software vulnerabilities
- D . Physically damaging hardware
Correct Answer: B
B
Explanation:
Social engineering exploits human psychology to extract confidential information like credentials, internal structures, and other critical data.
B
Explanation:
Social engineering exploits human psychology to extract confidential information like credentials, internal structures, and other critical data.
Question #28
Enumeration differs from scanning because it:
- A . Collects deeper system details like usernames and shares
- B . Only identifies open ports
- C . Focuses only on web applications
- D . Is purely passive
Correct Answer: A
A
Explanation:
Enumeration dives deeper into network or system resources, retrieving user lists, shares, policies, and other internal details after scanning identifies open doors.
A
Explanation:
Enumeration dives deeper into network or system resources, retrieving user lists, shares, policies, and other internal details after scanning identifies open doors.
Question #29
What is a major risk associated with active reconnaissance?
- A . Breaching firewalls
- B . Triggering detection systems
- C . Gaining root access
- D . Crashing network services
Correct Answer: B
B
Explanation:
Active reconnaissance increases the risk of being detected by intrusion detection systems (IDS) or alerting the target organization.
B
Explanation:
Active reconnaissance increases the risk of being detected by intrusion detection systems (IDS) or alerting the target organization.
Question #30
Identifying a company’s network topology during reconnaissance allows an attacker to:
- A . Crash routers
- B . Plan attack paths effectively
- C . Install malware remotely
- D . Deface websites
Correct Answer: B
B
Explanation:
Understanding the network layout enables attackers to choose optimal points of entry and movement within the network.
B
Explanation:
Understanding the network layout enables attackers to choose optimal points of entry and movement within the network.