Question 41 · 888 in bank
Which of the following Google advanced search operators helps an attacker in gathering information about websites that are similar to a specified target URL?
Show answer
Answer: D
Certified Ethical Hacker (CEH)888 questions across 89 pages are complete and free, with no account or card.
888 questions in this bank
Free access · progress saved on this device
Which of the following Google advanced search operators helps an attacker in gathering information about websites that are similar to a specified target URL?
Answer: D
Passive reconnaissance involves collecting information through which of the following?
Answer: D
Passive reconnaissance is one that's performed without direct interactions with systems we're investigating. This makes me think that sniffing would also suffice, since we just hijack data that's already sent into ether, but option D seems the safest.
Source: Adapted from community discussion — Null_Pointer_Exception
_________ is a set of extensions to DNS that provide the origin authentication of DNS data to DNS clients (resolvers) so as to reduce the threat of DNS poisoning, spoofing, and similar types of attacks.
Answer: A
Which is the first step followed by Vulnerability Scanners for scanning a network?
Answer: D
You are a penetration tester working to test the user awareness of the employees of the client XYZ. You harvested two employees’ emails from some public sources and are creating a client-side backdoor to send it to the employees via email. Which stage of the cyber kill chain are you at?
Answer: B
Which of the following is a component of a risk assessment?
Answer: B
The HIPAA Privacy Rule provides federal protections for the individually identifiable health information held by covered entities and their business associates and gives patients an array of rights to that information. At the same time, the Privacy Rule permits the disclosure of health information needed for patient care and other necessary purposes. The Security Rule specifies a series of administrative, physical, and technical safeguards for covered entities and their business associates to use to ensure the confidentiality, integrity, and availability of electronically protected health information
Source: Adapted from community discussion — dorinh
PGP, SSL, and IKE are all examples of which type of cryptography?
Answer: D
While performing an Nmap scan against a host, Paola determines the existence of a firewall. In an attempt to determine whether the firewall is stateful or stateless, which of the following options would be best to use?
Answer: A
When utilizing technical assessment methods to assess the security posture of a network, which of the following techniques would be most effective in determining whether end-user security training would be beneficial?
Answer: B
By conducting a social engineering test, an organization can assess the level of awareness and knowledge of employees with regard to security best practices, and identify areas where additional training may be needed. Vulnerability scanning, application security testing, and network sniffing are all technical assessment methods that focus on identifying vulnerabilities in systems and networks, and do not directly measure the effectiveness of end-user security training. While these techniques are important for overall network security, they do not provide insight into the human factor of security. Therefore, social engineering is the most effective technique for assessing the effectiveness of end-user security training.
Source: Adapted from community discussion — lau2123
Which of the following is considered as one of the most reliable forms of TCP scanning?
Answer: A
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
312-50 practice, question 41. 888 questions available.
Version 1.0.0. How we source questions