Check Point 156-401 Practice Exams
Last updated on Oct 22,2026- Exam Code: 156-401
- Exam Name: Hacking 101 Check Point Certified PenTesting Associate (CCPA)
- Certification Provider: Check Point
- Latest update: Oct 22,2026
Question #81
When using Nslookup, what record type provides the IP address associated with a domain name?
- A . MX
- B . TXT
- C . A
- D . CNAME
Correct Answer: C
C
Explanation:
An ‘A’ record (Address record) maps a domain name to its corresponding IPv4 address, crucial during DNS interrogation.
C
Explanation:
An ‘A’ record (Address record) maps a domain name to its corresponding IPv4 address, crucial during DNS interrogation.
Question #82
What does OS fingerprinting help a penetration tester determine?
- A . Exact usernames
- B . Specific operating system and version
- C . Active malware
- D . VPN configurations
Correct Answer: B
B
Explanation:
OS fingerprinting identifies the target system’s operating system, which assists in selecting appropriate attack methods.
B
Explanation:
OS fingerprinting identifies the target system’s operating system, which assists in selecting appropriate attack methods.
Question #83
What type of attack uses DNS zone transfer during reconnaissance?
- A . Covert channel attack
- B . Unauthorized information gathering
- C . Ransomware attack
- D . Denial of Service attack
Correct Answer: B
B
Explanation:
Improperly configured DNS servers can allow unauthorized zone transfers, leaking sensitive network information.
B
Explanation:
Improperly configured DNS servers can allow unauthorized zone transfers, leaking sensitive network information.
Question #84
Which tool can be used to enumerate NetBIOS shares on a Windows network?
- A . Net View
- B . Nmap
- C . OpenVAS
- D . Wireshark
Correct Answer: A
A
Explanation:
The Net View command lists available shares and computers within the network, assisting in NetBIOS enumeration activities.
A
Explanation:
The Net View command lists available shares and computers within the network, assisting in NetBIOS enumeration activities.
Question #85
Which organization often sets ethical standards for ethical hackers?
- A . W3C
- B . IEEE
- C . EC-Council
- D . IETF
Correct Answer: C
C
Explanation:
EC-Council is responsible for certifications like CEH and sets guidelines for ethical hacking practices worldwide.
C
Explanation:
EC-Council is responsible for certifications like CEH and sets guidelines for ethical hacking practices worldwide.
Question #86
Which scanning technique aims to find services without establishing full TCP connections?
- A . SYN scanning
- B . Connect scanning
- C . Xmas scanning
- D . UDP scanning
Correct Answer: A
A
Explanation:
SYN scanning (half-open scanning) sends only SYN packets, avoiding full TCP connections and often evading firewalls or logging.
A
Explanation:
SYN scanning (half-open scanning) sends only SYN packets, avoiding full TCP connections and often evading firewalls or logging.
Question #87
Which law makes unauthorized access to computers illegal in the United States?
- A . GDPR
- B . CFAA (Computer Fraud and Abuse Act)
- C . DMCA
- D . HIPAA
Correct Answer: B
B
Explanation:
The Computer Fraud and Abuse Act (CFAA) criminalizes unauthorized access to computer systems in the United States to protect sensitive data.
B
Explanation:
The Computer Fraud and Abuse Act (CFAA) criminalizes unauthorized access to computer systems in the United States to protect sensitive data.
Question #88
A technique of using publicly available resources to gather information is called:
- A . Packet sniffing
- B . Social engineering
- C . OSINT (Open Source Intelligence)
- D . Privilege escalation
Correct Answer: C
C
Explanation:
OSINT involves collecting information from public sources like websites, job postings, and social media without engaging the target.
C
Explanation:
OSINT involves collecting information from public sources like websites, job postings, and social media without engaging the target.
Question #89
Which two scanning types are classified under active scanning? (Choose two.)
- A . DNS lookup
- B . Port scanning
- C . Vulnerability scanning
- D . Whois query
Correct Answer: B, C
B, C
Explanation:
Active scanning involves direct interaction with the target, such as port scans and vulnerability scans that might be detected.
B, C
Explanation:
Active scanning involves direct interaction with the target, such as port scans and vulnerability scans that might be detected.
Question #90
Which tool can be used to identify web server technologies?
- A . Netcraft
- B . Hydra
- C . Nikto
- D . OpenVAS
Correct Answer: A
A
Explanation:
Netcraft can passively gather information about web servers, operating systems, and technologies used by a target organization.
A
Explanation:
Netcraft can passively gather information about web servers, operating systems, and technologies used by a target organization.