Free Certified Professional Ethical Hacker (CPEH) Practice Questions

A.  

By implementing written security procedures, enabling employee security training, and promoting the benefits of security

B.  

By using informal networks of communication, establishing secret passing procedures, and immediately terminating employees

C.  

By sharing security secrets with employees, enabling employees to share secrets, and establishing a consultative help line

D.  

By decreasing an employee's vacation time, addressing ad-hoc employment clauses, and ensuring that managers know employee strengths

A.  

The key entered is a symmetric key used to encrypt the wireless data.

B.  

The key entered is a hash that is used to prove the integrity of the wireless data.

C.  

The key entered is based on the Diffie-Hellman method.

D.  

The key is an RSA key used to encrypt the wireless data.

A.  

Sender's public key

B.  

Receiver's private key

C.  

Receiver's public key

D.  

Sender's private key

A.  

Cross-site scripting

B.  

SQL injection

C.  

VPath injection

D.  

XML denial of service issues

A.  

The gateway is not routing to a public IP address.

B.  

The computer is using an invalid IP address.

C.  

The gateway and the computer are not on the same network.

D.  

The computer is not using a private IP address.

A.  

They provide a repeatable framework.

B.  

Anyone can run the command line scripts.

C.  

They are available at low cost.

D.  

They are subject to government regulation.

A.  

It is impossible to crack hashed user passwords unless the key used to encrypt them is obtained.

B.  

If a user forgets the password, it can be easily retrieved using the hash key stored by administrators.

C.  

Hashing is faster compared to more traditional encryption algorithms.

D.  

Passwords stored using hashes are non-reversible, making finding the password much more difficult.

A.  

Process

B.  

Procedure

C.  

Policy

D.  

Paradigm

A.  

Transport layer

B.  

Application layer

C.  

Data link layer

D.  

Network layer

A.  

Employers promote monitoring activities of employees as long as the employees demonstrate trustworthiness.

B.  

Employers use informal verbal communication channels to explain employee monitoring activities to employees.

C.  

Employers use network surveillance to monitor employee email traffic, network access, and to record employee keystrokes.

D.  

Employers provide employees written statements that clearly discuss the boundaries of monitoring activities and consequences.