.

Penetration testing is the practice of finding vulnerabilities and risks with the purpose of securing a computer or network. Penetration testing falls under which all-encompassing term?

Heather is performing a penetration test. She has gathered a lot of valuable information about her target already. Heather has used some hacking tools to determine that, on her target network, a computer named Production Workstation has port 445 open. Which step in the ethical hacking methodology is Heather performing?

Which of the following is the third step in the ethical hacking methodology?

Miguel is performing a penetration test on his client's web-based application. Which penetration test frameworks should Miguel utilize?

The penetration testing life cycle is a common methodology used when performing a penetration test. This methodology is almost identical to the ethical hacking methodology. Which of the following is the key difference between these methodologies?

You are executing an attack in order to simulate an outside attack. Which type of penetration test are you performing?

Which of the following best describes a gray box penetration test?

Randy was just hired as a penetration tester for the red team. Which of the following best describes the red team?

The Stuxnet worm was discovered in 2010 and was used to gain sensitive information on Iran's industrial infrastructure. This worm was probably active for about five years before being discovered. During this time, the attacker had access to the target. Which type of attack was Stuxnet?

Which type of threat actor only uses skills and knowledge for defensive purposes?

Which statement best describes a suicide hacker?

Miguel has been practicing his hacking skills. He has discovered a vulnerability on a system that he did not have permission to attack. Once Miguel discovered the vulnerability, he anonymously alerted the owner and instructed him how to secure the system. What type of hacker is Miguel in this scenario?

The process of analyzing an organization's security and determining its security holes is known as:

Which of the following best describes a script kiddie?

Any attack involving human interaction of some kind is referred to as:

Using a fictitious scenario to persuade someone to perform an action or give information they aren't authorized to share is called:

You are instant messaging a coworker, and you get a malicious link. Which type of social engineering attack is this?

Brandon is helping Fred with his computer. He needs Fred to enter his username and password into the system. Fred enters the username and password while Brandon is watching him. Brandon explains to Fred that it is not a good idea to allow anyone to watch you type in usernames or passwords. Which type of social engineering attack is Fred referring to?

Which of the following best describes an inside attacker?

Compliments, misinformation, feigning ignorance, and being a good listener are tactics of which social engineering technique?

You get a call from one of your best customers. The customer is asking about your company's employees, teams, and managers. What should you do?

Jason is at home, attempting to access the website for his music store. When he goes to the website, it has a simple form asking for name, email, and phone number. This is not the music store website. Jason is sure the website has been hacked. How did the attacker accomplish this hack?

An attack that targets senior executives and high-profile victims is referred to as:

While reviewing video files from your organization's security cameras, you notice a suspicious person using piggybacking to gain access to your building. The individual in question did not have a security badge. Which of the following would you most likely implement to keep this from happening in the future?

Implementing emergency lighting that runs on protected power and automatically switches on when the main power goes off is part of which physical control?

Closed-circuit television can be used as both a preventative tool (to monitor live events) or as an investigative tool (to record events for later playback). Which camera is more vandal-resistant than other cameras?

Important aspects of physical security include which of the following?

A person in a dark grey hoodie has jumped the fence at your research center. A security guard has detained this person, denying him physical access. Which of the following areas of physical security is the security guard currently in?

On her way to work, Angela accidentally left her backpack with a company laptop at the coffee shop. What type of threat has she caused the company?

The U.S. Department of Commerce has an agency with the goal of protecting organizational operations, assets, and individuals from threats such as malicious cyber-attacks, natural disasters, structural failures, and human errors. Which of the following agencies was created for this purpose?