Check Point 156-401 Practice Exams
Last updated on Oct 22,2026- Exam Code: 156-401
- Exam Name: Hacking 101 Check Point Certified PenTesting Associate (CCPA)
- Certification Provider: Check Point
- Latest update: Oct 22,2026
Question #61
What is one major reason penetration testing improves an organization’s information security posture?
- A . It guarantees perfect protection
- B . It identifies potential weaknesses before real attacks
- C . It improves public relations
- D . It reduces legal obligations
Correct Answer: B
B
Explanation:
Penetration testing helps organizations discover and fix vulnerabilities before malicious attackers exploit them.
B
Explanation:
Penetration testing helps organizations discover and fix vulnerabilities before malicious attackers exploit them.
Question #62
During a scan, port 80 is found open.
Which service is most likely running?
- A . SSH
- B . HTTP Web Server
- C . FTP
- D . DNS
Correct Answer: B
B
Explanation:
Port 80 typically hosts HTTP traffic, indicating a web server running on the target machine.
B
Explanation:
Port 80 typically hosts HTTP traffic, indicating a web server running on the target machine.
Question #63
Which two indicators can suggest an outdated and vulnerable service? (Choose two.)
- A . Presence of SSL certificates
- B . Server banner showing old version
- C . Missing service documentation
- D . Banner indicating unsupported software
Correct Answer: B, D
B, D
Explanation:
Banners displaying old versions or unsupported software highlight vulnerable systems, presenting easy targets for attackers.
B, D
Explanation:
Banners displaying old versions or unsupported software highlight vulnerable systems, presenting easy targets for attackers.
Question #64
Which organization enforces GDPR compliance?
- A . NSA
- B . European Data Protection Authorities
- C . ISO
- D . IETF
Correct Answer: B
B
Explanation:
GDPR is enforced by European Data Protection Authorities to ensure the lawful processing and protection of personal data.
B
Explanation:
GDPR is enforced by European Data Protection Authorities to ensure the lawful processing and protection of personal data.
Question #65
Social engineering during reconnaissance focuses on:
- A . Exploiting software vulnerabilities
- B . Trickery to gather sensitive information
- C . Port scanning
- D . DNS server compromise
Correct Answer: B
B
Explanation:
Social engineering manipulates people into revealing confidential information like usernames, passwords, or internal structures.
B
Explanation:
Social engineering manipulates people into revealing confidential information like usernames, passwords, or internal structures.
Question #66
Which two reconnaissance techniques target DNS servers directly? (Choose two.)
- A . Zone transfer
- B . Whois lookup
- C . Subdomain enumeration
- D . Port scanning
Correct Answer: A, C
A, C
Explanation:
Zone transfers and subdomain enumeration focus directly on DNS infrastructure to gather detailed network information.
A, C
Explanation:
Zone transfers and subdomain enumeration focus directly on DNS infrastructure to gather detailed network information.
Question #67
Which of the following best defines reconnaissance in ethical hacking?
- A . Exploiting discovered vulnerabilities
- B . Gathering information without alerting the target
- C . Gaining unauthorized access
- D . Launching denial of service attacks
Correct Answer: B
B
Explanation:
Reconnaissance involves discreetly gathering data about a target to prepare for later exploitation, often through public or semi-public sources.
B
Explanation:
Reconnaissance involves discreetly gathering data about a target to prepare for later exploitation, often through public or semi-public sources.
Question #68
What is the first step in the penetration testing process?
- A . Exploitation
- B . Reporting
- C . Reconnaissance
- D . Privilege Escalation
Correct Answer: C
C
Explanation:
Reconnaissance is the first phase where information is gathered about the target, providing a basis for identifying potential vulnerabilities.
C
Explanation:
Reconnaissance is the first phase where information is gathered about the target, providing a basis for identifying potential vulnerabilities.
Question #69
Which tool is best suited for detecting vulnerabilities in a web server?
- A . Netcat
- B . Nikto
- C . Wireshark
- D . Shodan
Correct Answer: B
B
Explanation:
Nikto is a web server scanner that detects misconfigurations, outdated software, and known vulnerabilities.
B
Explanation:
Nikto is a web server scanner that detects misconfigurations, outdated software, and known vulnerabilities.
Question #70
In penetration testing, what is the primary purpose of maintaining access?
- A . Gathering more information post-exploitation
- B . Escalating privileges on first entry
- C . Informing the client immediately
- D . Deleting system logs
Correct Answer: A
A
Explanation:
Maintaining access ensures that the penetration tester can continue gathering intelligence and simulate an attacker’s behavior over time.
A
Explanation:
Maintaining access ensures that the penetration tester can continue gathering intelligence and simulate an attacker’s behavior over time.