Free Check Point 156-401 Practice Exams

Check Point 156-401 Practice Exams

Last updated on Oct 22,2026
  • Exam Code: 156-401
  • Exam Name: Hacking 101 Check Point Certified PenTesting Associate (CCPA)
  • Certification Provider: Check Point
  • Latest update: Oct 22,2026
Question #71

What does a TCP Xmas scan do?

  • A . Lights up all flags in the TCP header
  • B . Sends only SYN packets
  • C . Creates false login prompts
  • D . Encrypts communication

Reveal Solution Hide Solution

Correct Answer: A
A

Explanation:

A TCP Xmas scan sets all flags in the TCP header, sending a special packet to determine port states based on responses.
Question #72

Which two are examples of passive reconnaissance techniques? (Choose two.)

  • A . Google hacking
  • B . DNS zone transfer
  • C . Using theHarvester
  • D . Port scanning

Reveal Solution Hide Solution

Correct Answer: A, C
A, C

Explanation:

Google hacking and using theHarvester collect information without engaging the target, making them passive methods.
Question #73

DNS interrogation can reveal which of the following?

  • A . Open ports
  • B . Names and IP addresses of mail servers
  • C . Encrypted passwords
  • D . Database configurations

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

DNS interrogation, such as querying MX and A records, can expose valuable network information like mail server addresses.
Question #74

Which tool is best used for capturing and analyzing network traffic?

  • A . Metasploit
  • B . OpenVAS
  • C . Wireshark
  • D . Nikto

Reveal Solution Hide Solution

Correct Answer: C
C

Explanation:

Wireshark is a network protocol analyzer that captures and dissects network traffic for in-depth analysis.
Question #75

Which two goals are primary in penetration testing? (Choose two.)

  • A . Discover vulnerabilities
  • B . Obtain financial rewards
  • C . Test system defenses
  • D . Leak sensitive data

Reveal Solution Hide Solution

Correct Answer: A, C
A, C

Explanation:

Penetration testing focuses on identifying vulnerabilities and testing the effectiveness of existing security controls.
Question #76

A successful SNMP enumeration may reveal:

  • A . Firewall rule sets
  • B . Device uptime and hardware info
  • C . User passwords
  • D . SQL database queries

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

SNMP can reveal device statistics such as uptime, hardware configurations, and sometimes sensitive network architecture details.
Question #77

What type of reconnaissance involves sending packets to a target?

  • A . Passive
  • B . Active
  • C . Covert
  • D . Offline

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

Active reconnaissance involves direct communication with target systems, such as sending packets to probe for information.
Question #78

Which two pieces of information are typically collected during footprinting? (Choose two.)

  • A . Employee salaries
  • B . IP address ranges
  • C . Domain name information
  • D . Encrypted traffic contents

Reveal Solution Hide Solution

Correct Answer: B, C
B, C

Explanation:

During footprinting, testers gather critical network information like domain names, IP ranges, and organizational structure details.
Question #79

What information can traceroute provide during reconnaissance?

  • A . Internal employee data
  • B . Network path and intermediate devices
  • C . Username and password hashes
  • D . Firewall configurations

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

Traceroute identifies the path packets take to reach a target and reveals intermediary devices, aiding network topology mapping.
Question #80

Which protocol is commonly used in SNMP enumeration?

  • A . TCP
  • B . UDP
  • C . ICMP
  • D . HTTP

Reveal Solution Hide Solution

Correct Answer: B
B

Explanation:

SNMP communication typically happens over UDP ports 161 and 162, enabling lightweight queries and responses between devices.
Previous Questions Next Questions