Certified Ethical Hacker (CEH) v.10 Practice Questions and Answers

Certified Ethical Hacker (CEH) v.10 Practice Questions Which of the following is the best example of a deterrent control? A. A log aggregation system B. Hidden cameras onsite. C. A guard posted outside the door. D. Backup recovery systems. - Answer- C. A guard posted outside the door. Deterrents have to be visible to prevent an attack. A guard visible outside the door could help prevent physical attacks. Enacted in 2002, this US law requires every federal agency to implement information security programs, including significant reporting on compliance and accreditation. Which of the following is the best choice for this definition? A. FISMA B. HIPAA C. NIST 800-53 D. OSSTMM - Answer- A. FISMA (Federal Information Security Management Act) FISMA has been around since 2002 and was updated in 2014. It gave information security responsibilities to NIST, OMB, and other government agencies, and declared the Department of Homeland Security (DHS) as the operational lead for budgets and guidelines on security matters. Brad has done some research and determined that a certain set of systems on his network fail once every ten years. The purchase price for each of these systems is $1200. Brad also discovers that the admins on staff, who earn $50 an hour, estimate five hours to replace a machine. Five employees, earning $25 an hour, depend on each system and will be completely unproductive while it's down. What is the ALE of these devices? A. $2075 B. $207.50 C. $120 D. $1200 - Answer- B. $207.50 ARO = 1 Occurrence/10 years = 0.1 SLE = $1200 + (5 x 50 = 250) + (5 x 5 x 25 = 625) = $2075 $2075 x 0.1 = $207.50 An ethical hacker is hired to test the security of a business network. The CEH is given no prior knowledge of the network and has a specific framework in which to work, defining boundaries, NDAs, and the completion data. Which of the following is a true statement? A. A white hat is attempting a black box test. B. A white hat is attempting a white box test. C. A black hat is attempting a black box test.