According to the CEH methodology, what is the next step to be performed after footprinting?

What is the main difference between a "Normal" SQL Injection and a "Blind" SQL Injection vulnerability?

While scanning a network you observe that all of the web servers in the DMZ are responding to ACK packets on port 80.
What can you infer from this observation?

Steve scans the network for SNMP enabled devices. Which port number Steve should scan?

While conducting a penetration test, the tester determines that there is a firewall between the tester's machine and the target machine. The firewall is only monitoring TCP handshaking of packets at the session layer of the OSI model. Which type of firewall is the tester trying to traverse?