CEH Practice Test

Answer choices

1. A. Payroll tax reporting, invoicing, and customer service routing, under the organization’s defined implementation and exception-management process.
2. B. Office seating plans, cafeteria access, and meeting etiquette, for the described technical objective and its associated operational control requirements, as selected.
3. C. Brand marketing, ad placement, and social media scheduling, under organization-wide implementation-governance requirements.
4. D. Reconnaissance, scanning, enumeration, vulnerability analysis, and related technical attack and defense topics, as the organization’s selected response.

Wrong-answer review

• A. Payroll tax reporting, invoicing, and customer service routing, under the organization’s defined implementation and exception-management process.: Administrative finance processes are outside the technical assessment domain.
• B. Office seating plans, cafeteria access, and meeting etiquette, for the described technical objective and its associated operational control requirements, as selected.: Facilities logistics are not technical attack-and-defense topics in the scenario.
• C. Brand marketing, ad placement, and social media scheduling, under organization-wide implementation-governance requirements.: Marketing operations do not describe CEH technical assessment work.

Answer choices

1. A. Authorized testing helps the organization find and fix weaknesses before real attackers exploit them
2. B. It matters only after a public breach has occurred, for the described technical objective and its associated operational control requirements, for evaluation.
3. C. It replaces authorization with technical skill, for the described technical objective and its associated operational control requirements, in practice.
4. D. It is mainly a way to collect dramatic screenshots, within the program scope and defensive outcomes context.

Answer choices

1. A. Stop at the level needed to prove the finding and stay within agreed rules of engagement
2. B. Keep escalating until full administrative control is obtained, as the primary implementation for the described business requirement.
3. C. Ignore the scope because deeper access gives better evidence, for the described technical objective and its associated operational control requirements.
4. D. Delete logs so defenders are not alerted during testing, as the recommended implementation across the complete governed service lifecycle.

Answer choices

1. A. Stop at the level needed to prove the finding and stay within agreed rules of engagement, for the specified implementation requirement.
2. B. Keep escalating until full administrative control is obtained, under the stated technical, operational, and governance constraints.
3. C. Ignore the scope because deeper access gives better evidence, for the described technical objective and its associated operational control requirements, as described.
4. D. Delete logs so defenders are not alerted during testing, for the described technical objective and its associated operational control requirements, within the proposed design.

Answer choices

1. A. Information Disclosure, within this design.
2. B. Patch Verification, when applied.
3. C. Purple Teaming, as the recommended response to this scenario.
4. D. Mean Time to Remediate, within the described context.

Answer choices

1. A. It lets the assessor avoid explaining technical evidence, as the recommended implementation across the complete governed service lifecycle.
2. B. Remediation teams need confidence and validation level when prioritizing work, for the stated reporting and evidence requirement.
3. C. It proves every low-confidence item is harmless, within the documented scope, ownership, and validation boundaries.
4. D. It is used only to make the report longer, under the stated decision criteria.

Answer choices

1. A. Nmap, under the documented operational and governance requirements.
2. B. FOCA (Fingerprinting Organizations with Collected Archives)
3. C. Hydra, within the documented operational, security, ownership, and validation requirements.
4. D. Wireshark, for the stated security, delivery, and accountability requirements.

Answer choices

1. A. Close each item as soon as it is assigned, under organization-wide implementation-governance requirements.
2. B. Validated findings should be tracked through remediation and verification
3. C. Ignore verification once a patch window ends, as the organization’s selected response.
4. D. Replace remediation tracking with annual awareness training, for the stated remediation and patch management requirement.

Answer choices

1. A. Broken Access Control, for the stated requirement.
2. B. Cross-Site Request Forgery, for this task.
3. C. Software Supply Chain Failures, for the specified implementation requirement.
4. D. Security Misconfiguration, within the web application security context.

Answer choices

1. A. Treat it as the highest priority solely because it exists, under the documented operational and governance requirements.
2. B. Remove it from all tracking because it is internal, for the described technical objective and its associated operational control requirements, as selected.
3. C. Rank it by the number of words in the finding title, for the described technical objective and its associated operational control requirements, for evaluation.
4. D. The risk priority is lower when the finding has no internet exposure and no sensitive data impact, under the proposed approach.