Common ethical hacking and penetration testing interview questions, covering both technical depth and the professional judgment the role requires.
What's the difference between a vulnerability scan and a penetration test?
A vulnerability scan uses automated tools to identify known weaknesses — fast but surface-level. A penetration test goes further, actively attempting to exploit those weaknesses to prove real impact, requiring human judgment a scanner can't replicate.
Explain the phases of a penetration test.
Typically: reconnaissance (gathering information about the target), scanning (identifying live hosts and services), exploitation (attempting to gain access), post-exploitation (assessing what access enables), and reporting (documenting findings and remediation guidance).
What is SQL injection and how would you test for it?
SQL injection occurs when untrusted input is inserted directly into a database query without proper sanitization, letting an attacker manipulate the query. Testing involves submitting crafted input — like a single quote — to see if it causes unexpected database errors or behavior, always within an authorized scope.
How do you responsibly disclose a vulnerability you've found?
Follow the engagement's agreed reporting process or, for unsolicited findings, the organization's responsible disclosure policy if one exists — document the issue clearly, avoid public disclosure before a fix is available, and never exploit beyond what's needed to prove the vulnerability.
What's the difference between black-box, white-box, and gray-box testing?
Black-box testing means no prior knowledge of the system, simulating an external attacker. White-box means full access to source code and architecture. Gray-box sits in between — partial knowledge, similar to an insider threat or a partner with limited access.
Go deeper
These questions are just the surface
Our Ethical Hacking program builds the hands-on experience behind these answers — not just memorized responses.
