GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

CEHv9 Chapter 1

Paul Anstall 14 questions

Take the quiz

Questions in this quiz (14)

  1. 1Which of the following would be the best example of a deterrent control?
    1. AA log aggregation system
    2. BHidden cameras onsite
    3. CA guard posted outside the door
    4. DBackup recovery systems
  2. 2Enacted in 2002, this U.S. law requires every Federal agency to implement information security programs, including significant reporting on compliance and accreditation. Which of the following is the best choice for this definition?
    1. AFISMA
    2. BHIPAA
    3. CNIST 800-53
    4. DOSSTM
  3. 3Brad has done some research and determined a certain set of systems on his network fail once every ten years. The purchase price for each of these systems is $1200. Additionally, Brad discovers the administrators on staff, who earn $50 an hour, estimate five hours to replace a machine. Five employees, earning $25 an hour, depend on each system and will be completely unproductive while it is down. If you were to ask Brad for an ALE on these devices, what should he answer with?
    1. A$2075
    2. B$207.50
    3. C$120
    4. D$1200
  4. 4An ethical hacker is hired to test the security of a business network. The CEH is given no prior knowledge of the network and has a specific framework in which to work, defining boundaries, nondisclosure agreements, and the completion date. Which of the following is a true statement?
    1. AA white hat is attempting a black-box test.
    2. BA white hat is attempting a white-box test.
    3. CA black hat is attempting a black-box test.
    4. DA black hat is attempting a gray-box test.
  5. 5When an attack by a hacker is politically motivated, the hacker is said to be participating in which of the following?
    1. ABlack-hat hacking
    2. BGray-box attacks
    3. CGray-hat attacks
    4. DHactivism
  6. 6Two hackers attempt to crack a company’s network resource security. One is considered an ethical hacker, whereas the other is not. What distinguishes the ethical hacker from the “cracker”?
    1. AThe cracker always attempts white-box testing.
    2. BThe ethical hacker always attempts black-box testing.
    3. CThe cracker posts results to the Internet.
    4. DThe ethical hacker always obtains written permission before testing.
  7. 7In which stage of an ethical hack would the attacker actively apply tools and techniques to gather more in-depth information on the targets?
    1. AActive reconnaissance
    2. BScanning and enumeration
    3. CGaining access
    4. DPassive reconnaissance
  8. 8Which type of attack is generally conducted as an inside attacker with elevated privileges on the resources?
    1. AGray box
    2. BWhite box
    3. CBlack box
    4. DActive reconnaissance
  9. 9Which of the following Common Criteria processes refers to the system or product being tested?
    1. AST
    2. BPP
    3. CEAL
    4. DTOE
  10. 10Your company has a document that spells out exactly what employees are allowed to do on their computer systems. It also defines what is prohibited and what consequences await those who break the rules. A copy of this document is signed by all employees prior to their network access. Which of the following best describes this policy?
    1. AInformation Security Policy
    2. BSpecial Access Policy
    3. CInformation Audit Policy
    4. DNetwork Connection Policy

Information

Description
Information Technology Quiz on CEHv9 Chapter 1, created by Paul Anstall on 02/02/2017.
Language
English
Views
113
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?