312-50 : CEH Certified Ethical Hacker (312-50v9) : Part 23

312-50 : All Parts

One of the Forbes 500 companies has been subjected to a large scale attack. You are one of the shortlisted pen testers that they may hire. During the interview with the CIO, he emphasized that he wants to totally eliminate all risks. What is one of the first things you should do when hired?
- Interview all employees in the company to rule out possible insider threats.
- Establish attribution to suspected attackers.
- Explain to the CIO that you cannot eliminate all risk, but you will be able to reduce risk to acceptable levels.
- Start the Wireshark application to start sniffing network traffic.
Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE?
- http-git
- http-headers
- http enum
- http-methods
Which of the following is the most important phase of ethical hacking wherein you need to spend considerable amount of time?
- Gaining access
- Escalating privileges
- Network mapping
- Footprinting
It is a short-range wireless communication technology that allows mobile phones, computers and other devices to connect and communicate. This technology intends to replace cables connecting portable devices with high regards to security.
- Bluetooth
- Radio-Frequency Identification
- WLAN
- InfraRed
Matthew received an email with an attachment named “YouWon$10Grand.zip.” The zip file contains a file named “HowToClaimYourPrize.docx.exe.” Out of excitement and curiosity, Matthew opened the said file. Without his knowledge, the file copies itself to Matthew’s APPDATA\IocaI directory and begins to beacon to a Command-and-control server to download additional malicious binaries. What type of malware has Matthew encountered?
- Key-logger
- Trojan
- Worm
- Macro Virus
Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?
- NET FILE
- NET USE
- NET CONFIG
- NET VIEW
What is the approximate cost of replacement and recovery operation per year of a hard drive that has a value of $300 given that the technician who charges $10/hr would need 10 hours to restore OS and Software and needs further 4 hours to restore the database from the last backup to the new hard disk? Calculate the SLE, ARO, and ALE. Assume the EF = 1 (100%).
- $440
- $100
- $1320
- $146
Knowing the nature of backup tapes, which of the following is the MOST RECOMMENDED way of storing backup tapes?
- In a cool dry environment
- Inside the data center for faster retrieval in a fireproof safe
- In a climate controlled facility offsite
- On a different floor in the same building
Which of the following tools would MOST LIKELY be used to perform security audit on various of forms of network systems?
- Intrusion Detection System
- Vulnerability scanner
- Port scanner
- Protocol analyzer
Security and privacy of/on information systems are two entities that requires lawful regulations. Which of the following regulations defines security and privacy controls for Federal information systems and organizations?
- NIST SP 800-53
- PCI-DSS
- EU Safe Harbor
- HIPAA
A big company, who wanted to test their security infrastructure, wants to hire elite pen testers like you. During the interview, they asked you to show sample reports from previous penetration tests. What should you do?
- Share reports, after NDA is signed
- Share full reports, not redacted
- Decline but, provide references
- Share full reports with redactions
You are about to be hired by a well known Bank to perform penetration tests. Which of the following documents describes the specifics of the testing, the associated violations, and essentially protects both the bank’s interest and your liabilities as a tester?
- Service Level Agreement
- Non-Disclosure Agreement
- Terms of Engagement
- Project Scope
The practical realities facing organizations today make risk response strategies essential. Which of the following is NOT one of the five basic responses to risk?
- Accept
- Mitigate
- Delegate
- Avoid
A company recently hired your team of Ethical Hackers to test the security of their network systems. The company wants to have the attack be as realistic as possible. They did not provide any information besides the name of their company. What phase of security testing would your team jump in right away?
- Scanning
- Reconnaissance
- Escalation
- Enumeration
TCP/IP stack fingerprinting is the passive collection of configuration attributes from a remote device during standard layer 4 network communications. Which of the following tools can be used for passive OS fingerprinting?
- nmap
- ping
- tracert
- tcpdump
The chance of a hard drive failure is known to be once every four years. The cost of a new hard drive is $500. EF (Exposure Factor) is about 0.5. Calculate for the Annualized Loss Expectancy (ALE).
- $62.5
- $250
- $125
- $65.2
Backing up data is a security must. However, it also have certain level of risks when mishandled. Which of the following is the greatest threat posed by backups?
- A backup is the source of Malware or illicit information
- A backup is incomplete because no verification was performed
- A backup is unavailable during disaster recovery
- An unencrypted backup can be misplaced or stolen
What kind of risk will remain even if all theoretically possible safety measures would be applied?
- Residual risk
- Inherent risk
- Impact risk
- Deferred risk
While doing a Black box pen test via the TCP port (80), you noticed that the traffic gets blocked when you tried to pass IRC traffic from a web enabled host. However, you also noticed that outbound HTTP traffic is being allowed. What type of firewall is being utilized for the outbound traffic?
- Stateful
- Application
- Circuit
- Packet Filtering
It is a widely used standard for message logging. It permits separation of the software that generates messages, the system that stores them, and the software that reports and analyzes them. This protocol is specifically designed for transporting event messages. Which of the following is being described?
- SNMP
- ICMP
- SYSLOG
- SMS

312-50 : All Parts

312-50 : CEH Certified Ethical Hacker (312-50v9) : All Parts
312-50 Part 01	312-50 Part 09	312-50 Part 17	312-50 Part 25
312-50 Part 02	312-50 Part 10	312-50 Part 18	312-50 Part 26
312-50 Part 03	312-50 Part 11	312-50 Part 19	312-50 Part 27
312-50 Part 04	312-50 Part 12	312-50 Part 20	312-50 Part 28
312-50 Part 05	312-50 Part 13	312-50 Part 21	312-50 Part 29
312-50 Part 06	312-50 Part 14	312-50 Part 22	312-50 Part 30
312-50 Part 07	312-50 Part 15	312-50 Part 23	312-50 Part 31
312-50 Part 08	312-50 Part 16	312-50 Part 24

312-50 : CEH Certified Ethical Hacker (312-50v9) : All Parts
312-50 Part 01	312-50 Part 09	312-50 Part 17	312-50 Part 25
312-50 Part 02	312-50 Part 10	312-50 Part 18	312-50 Part 26
312-50 Part 03	312-50 Part 11	312-50 Part 19	312-50 Part 27
312-50 Part 04	312-50 Part 12	312-50 Part 20	312-50 Part 28
312-50 Part 05	312-50 Part 13	312-50 Part 21	312-50 Part 29
312-50 Part 06	312-50 Part 14	312-50 Part 22	312-50 Part 30
312-50 Part 07	312-50 Part 15	312-50 Part 23	312-50 Part 31
312-50 Part 08	312-50 Part 16	312-50 Part 24

312-50 : CEH Certified Ethical Hacker (312-50v9) : Part 23

One of the Forbes 500 companies has been subjected to a large scale attack. You are one of the shortlisted pen testers that they may hire. During the interview with the CIO, he emphasized that he wants to totally eliminate all risks. What is one of the first things you should do when hired?

Which of the following is an NMAP script that could help detect HTTP Methods such as GET, POST, HEAD, PUT, DELETE, TRACE?

Which of the following is the most important phase of ethical hacking wherein you need to spend considerable amount of time?

It is a short-range wireless communication technology that allows mobile phones, computers and other devices to connect and communicate. This technology intends to replace cables connecting portable devices with high regards to security.

Which among the following is a Windows command that a hacker can use to list all the shares to which the current user context has access?

Knowing the nature of backup tapes, which of the following is the MOST RECOMMENDED way of storing backup tapes?

Which of the following tools would MOST LIKELY be used to perform security audit on various of forms of network systems?

Security and privacy of/on information systems are two entities that requires lawful regulations. Which of the following regulations defines security and privacy controls for Federal information systems and organizations?

A big company, who wanted to test their security infrastructure, wants to hire elite pen testers like you. During the interview, they asked you to show sample reports from previous penetration tests. What should you do?

You are about to be hired by a well known Bank to perform penetration tests. Which of the following documents describes the specifics of the testing, the associated violations, and essentially protects both the bank’s interest and your liabilities as a tester?

The practical realities facing organizations today make risk response strategies essential. Which of the following is NOT one of the five basic responses to risk?

TCP/IP stack fingerprinting is the passive collection of configuration attributes from a remote device during standard layer 4 network communications. Which of the following tools can be used for passive OS fingerprinting?

The chance of a hard drive failure is known to be once every four years. The cost of a new hard drive is $500. EF (Exposure Factor) is about 0.5. Calculate for the Annualized Loss Expectancy (ALE).

Backing up data is a security must. However, it also have certain level of risks when mishandled. Which of the following is the greatest threat posed by backups?

What kind of risk will remain even if all theoretically possible safety measures would be applied?

While doing a Black box pen test via the TCP port (80), you noticed that the traffic gets blocked when you tried to pass IRC traffic from a web enabled host. However, you also noticed that outbound HTTP traffic is being allowed. What type of firewall is being utilized for the outbound traffic?