Paul Anstall
Quiz by , created more than 1 year ago

Information Technology Quiz on CEHv9 Chapter 1, created by Paul Anstall on 02/02/2017.

112
0
0
Paul Anstall
Created by Paul Anstall almost 9 years ago
Close

CEHv9 Chapter 1

CEHv9 Chapter 1

Question 1 of 14

1

Which of the following would be the best example of a deterrent control?

Select one of the following:

  • A log aggregation system

  • Hidden cameras onsite

  • A guard posted outside the door

  • Backup recovery systems

Explanation

Question 2 of 14

1

Enacted in 2002, this U.S. law requires every Federal agency to implement information security programs, including significant reporting on compliance and accreditation. Which of the following is the best choice for this definition?

Select one of the following:

  • FISMA

  • HIPAA

  • NIST 800-53

  • OSSTM

Explanation

Question 3 of 14

1

Brad has done some research and determined a certain set of systems on his network fail once every ten years. The purchase price for each of these systems is $1200. Additionally, Brad discovers the administrators on staff, who earn $50 an hour, estimate five hours to replace a machine. Five employees, earning $25 an hour, depend on each system and will be completely unproductive while it is down. If you were to ask Brad for an ALE on these devices, what should he answer with?

Select one of the following:

  • $2075

  • $207.50

  • $120

  • $1200

Explanation

Question 4 of 14

1

An ethical hacker is hired to test the security of a business network. The CEH is given no prior knowledge of the network and has a specific framework in which to work, defining boundaries, nondisclosure agreements, and the completion date. Which of the following is a true statement?

Select one of the following:

  • A white hat is attempting a black-box test.

  • A white hat is attempting a white-box test.

  • A black hat is attempting a black-box test.

  • A black hat is attempting a gray-box test.

Explanation

Question 5 of 14

1

When an attack by a hacker is politically motivated, the hacker is said to be participating in which of the following?

Select one of the following:

  • Black-hat hacking

  • Gray-box attacks

  • Gray-hat attacks

  • Hactivism

Explanation

Question 6 of 14

1

Two hackers attempt to crack a company’s network resource security. One is considered an ethical hacker, whereas the other is not. What distinguishes the ethical hacker from the “cracker”?

Select one of the following:

  • The cracker always attempts white-box testing.

  • The ethical hacker always attempts black-box testing.

  • The cracker posts results to the Internet.

  • The ethical hacker always obtains written permission before testing.

Explanation

Question 7 of 14

1

In which stage of an ethical hack would the attacker actively apply tools and techniques to gather more in-depth information on the targets?

Select one of the following:

  • Active reconnaissance

  • Scanning and enumeration

  • Gaining access

  • Passive reconnaissance

Explanation

Question 8 of 14

1

Which type of attack is generally conducted as an inside attacker with elevated privileges on the resources?

Select one of the following:

  • Gray box

  • White box

  • Black box

  • Active reconnaissance

Explanation

Question 9 of 14

1

Which of the following Common Criteria processes refers to the system or product being tested?

Select one of the following:

  • ST

  • PP

  • EAL

  • TOE

Explanation

Question 10 of 14

1

Your company has a document that spells out exactly what employees are allowed to do on their computer systems. It also defines what is prohibited and what consequences await those who break the rules. A copy of this document is signed by all employees prior to their network access. Which of the following best describes this policy?

Select one of the following:

  • Information Security Policy

  • Special Access Policy

  • Information Audit Policy

  • Network Connection Policy

Explanation

Question 11 of 14

1

Sally is a member of a pen test team newly hired to test a bank’s security. She begins searching for IP addresses the bank may own by searching public records on the Internet. She also looks up news articles and job postings to discover information that may be valuable. What phase of the pen test is Sally working?

Select one of the following:

  • Preparation

  • Assessment

  • Conclusion

  • Reconnaissance

Explanation

Question 12 of 14

1

Joe is a security engineer for a firm. His company downsizes, and Joe discovers he will be laid off within a short amount of time. Joe plants viruses and sets about destroying data and settings throughout the network, with no regard to being caught. Which type of hacker is Joe considered to be?

Select one of the following:

  • Hactivist

  • Suicide hacker

  • Black hat

  • Script kiddie

Explanation

Question 13 of 14

1

Elements of security include confidentiality, integrity, and availability. Which technique provides for integrity?

Select one of the following:

  • Encryption

  • UPS

  • Hashing

  • Passwords

Explanation

Question 14 of 14

1

Which of the following best describes an effort to identify systems that are critical for continuation of operation for the organization?

Select one of the following:

  • BCP

  • BIA

  • MTD

  • DRP

Explanation

Previous
Next