Which statement BEST describes a limitation of ethical hacking?

Question

Options

• AEthical hacking guarantees complete security
• BEthical hacking cannot guarantee 100% security
• CEthical hackers can test any system without approval
• DEthical hacking ignores legal boundaries

• A
  4% (2)
• B
  91% (41)
• C
  2% (1)
• D
  2% (1)

Explanation

Option B is correct because ethical hacking - no matter how thorough - can only identify vulnerabilities that were discovered during the test scope, timeframe, and methodology used. New vulnerabilities emerge constantly, and testers cannot realistically simulate every possible attack vector, so a residual risk always remains.

Why the distractors are wrong:

• A is the opposite of reality; claiming "complete security" is a major red flag in any security context.
• C inverts a core principle - ethical hackers require explicit written authorization before testing any system; unauthorized testing is illegal.
• D is false; operating within legal boundaries is what defines ethical hacking and distinguishes it from malicious hacking.

Memory tip: Think of ethical hacking like a home security audit - a professional can check every lock and window they can see, but they can't guarantee a burglar won't find a new technique tomorrow. "Ethical" = legal + authorized; "limitation" = not a guarantee.

No community discussion yet for this question.