



Study with the several resources on Docsity
Earn points by helping other students or get them with a premium plan
Prepare for your exams
Study with the several resources on Docsity
Earn points to download
Earn points by helping other students or get them with a premium plan
Chapter 1 - Ethical Hacking Overview
Typology: Exams
1 / 5
This page cannot be seen from the preview
Don't miss anything!




If you work for a company as a security professional, you will most likely be placed on a special team that will conduct penetration tests. What is the standard name for a team made up of security professionals? - ANSWER - Red team Many experienced penetration testers will write a set of instructions that runs in sequence to perform tasks on a computer system. What type of resource are these penetration testers utilizing? - ANSWER - Scripts Penetration testing can create ethical, technical, and privacy concerns for a company's management team. What can a security consultant do to ensure the client fully understands the scope of testing that will be performed? - ANSWER - Create a contractual agreement What acronym represents the U.S. Department of Justice new branch that addresses computer crime? - ANSWER - CHIP
What common term is used by security testing professionals to describe vulnerabilities in a network? - ANSWER - Holes What derogatory title do experienced hackers, who are skilled computer operators, give to inexperienced hackers? - ANSWER - Script kiddies What federal law makes it illegal to intercept any type of communication, regardless of how it was transmitted? - ANSWER - Electronic Communication Privacy Act What name is given to people who break into computer systems with the sole purpose to steal or destroy data? - ANSWER - Crackers What organization disseminates research documents on computer and network security worldwide at no cost? - ANSWER - SANS What penetration model should a company use if they only want to allow the penetration tester(s) partial or incomplete
What professional level security certification requires five years of experience and is designed to focus on an applicant's security-related managerial skills? - ANSWER - Certified Information Systems Security Professional What professional security certification requires applicants to demonstrate hands-on abilities to earn their certificate? - ANSWER - Offensive Security Certified Professional What security certification did the "The International Council of Electronic Commerce Consultants" (EC-Council) develop? - ANSWER - Certified Ethical Hacker (CEH) What security certification uses the Open Source Security Testing Methodology Manual (OSSTMM) as its standardized methodology? - ANSWER - OPST What specific term does the U.S. Department of Justice use to label all illegal access to computer or network systems? - ANSWER - Hacking
What subject area is not one of the 22 domains tested during the CEH exam? - ANSWER - Trojan hijacking What term best describes a person who hacks computer systems for political or social reasons? - ANSWER - Hacktivist What type of assessment performed by a penetration tester attempts to identify all the weaknesses found in an application or on a system? - ANSWER - Vulnerability What type of laws should a penetration tester or student learning hacking techniques be aware of? - ANSWER - Local State Federal When a security professional is presented with a contract drawn up by a company's legal department, which allows them to "hack" the company's network, they should proceed by performing what precautionary step? - ANSWER - Consult their lawyer