Questions follow the ethical hacking methodology in order, so weak phases are easy to spot in your domain report. Content is conceptual and defensive in framing; no exploit code or live target material is included.