GOWUKAKU｜IT認定資格の最新の試験問題集（PDF版・無料サンプル問題）を提供しています
Hacking 101 Check Point Certified PenTesting Associate (CCPA) 試験
最終更新日: 2026/10/20 収録内容確認済 ｜ PDF問題集: 全 82 問収録
【仕様案内】：156-401 問題集（PDF版）は日本語版＆英語版の2言語セットに対応しております（日本語版が準備中の科目は英語版を即時ダウンロードのうえ、日本語版は準備完了次第ご登録メールへ自動送付いたします）。
本ページでは問題集の無料サンプル問題を公開しており、出題形式や現在の理解度を確認することができます。
全82問を収録したPDF版は、156-401 問題集からご確認いただけます。
Question No : 1
What information can Whois provide?
正解:
Explanation:
Whois provides domain ownership, registrar information, and contact details, which are useful for planning further reconnaissance.
Question No : 2
Which of the following is an example of active reconnaissance?
正解:
Explanation:
Active reconnaissance involves interacting directly with the target’s systems, such as attempting a DNS zone transfer.
Question No : 3
Which two tools are commonly used for passive footprinting? (Choose two.)
正解:
Explanation:
Whois and Nslookup are passive tools used to gather information like domain registration and DNS records without alerting the target.
Question No : 4
What is passive reconnaissance?
正解:
Explanation:
Passive reconnaissance involves collecting information about a target without any direct engagement, keeping the process undetectable.
Question No : 5
Which of the following best describes reconnaissance in penetration testing?
正解:
Explanation:
Reconnaissance is the phase where the tester gathers as much information as possible about the target
without engaging in active attacks.
Question No : 6
Penetration testing should ideally be conducted:
正解:
Explanation:
Regular penetration tests ensure continuous security monitoring and help organizations proactively address emerging threats.
Question No : 7
Which tool is best used for capturing and analyzing network traffic?
正解:
Explanation:
Wireshark is a network protocol analyzer that captures and dissects network traffic for in-depth analysis.
Question No : 8
Which two are common outputs after a penetration test? (Choose two.)
正解:
Explanation:
After a pen test, organizations receive vulnerability reports and actionable remediation recommendations to strengthen security.
Question No : 9
What is one major reason penetration testing improves an organization’s information security posture?
正解:
Explanation:
Penetration testing helps organizations discover and fix vulnerabilities before malicious attackers exploit them.
Question No : 10
Which protocol is targeted during ARP spoofing attacks?
正解:
Explanation:
ARP spoofing manipulates Address Resolution Protocol tables to redirect traffic through a malicious actor’s device.
Question No : 11
Which two tools are commonly used during the exploitation phase? (Choose two.)
正解:
Explanation:
Metasploit facilitates exploits, and John the Ripper is used for password cracking during or after successful exploitation.
Question No : 12
What does the "rules of engagement" document define?
正解:
Explanation:
Rules of engagement outline the authorized targets, time windows, and permissible testing techniques to avoid misunderstandings.
Question No : 13
Which tool is best suited for vulnerability scanning?
正解:
Explanation:
OpenVAS is a popular open-source tool specifically designed for comprehensive vulnerability scanning across networks and systems.
Question No : 14
What is the final step in a penetration test?
正解:
Explanation:
After all activities are completed, a penetration tester must document findings and deliver a professional report.
Question No : 15
A penetration tester should ensure which of the following before starting a test?
正解:
Explanation:
Always operate under written permission to protect both the client and the tester legally.