312-50 Exam Dumps - Certified Ethical Hacker Exam

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
Next
Last >>

Question # 65

Which of the following tools would be the best choice for achieving compliance with PCI Requirement 11?

Truecrypt

Sub7

Nessus

Clamwin

Full Access

Question # 66

When does the Payment Card Industry Data Security Standard (PCI-DSS) require organizations to perform external and internal penetration testing?

At least once a year and after any significant upgrade or modification

At least once every three years or after any significant upgrade or modification

At least twice a year or after any significant upgrade or modification

At least once every two years and after any significant upgrade or modification

Full Access

Question # 67

Which of the following ensures that updates to policies, procedures, and configurations are made in a controlled and documented fashion?

Regulatory compliance

Peer review

Change management

Penetration testing

Full Access

Question # 68

Which of the following programs is usually targeted at Microsoft Office products?

Polymorphic virus

Multipart virus

Macro virus

Stealth virus

Full Access

Question # 69

A certified ethical hacker (CEH) is approached by a friend who believes her husband is cheating. She offers to pay to break into her husband's email account in order to find proof so she can take him to court. What is the ethical response?

Say no; the friend is not the owner of the account.

Say yes; the friend needs help to gather evidence.

Say yes; do the job for free.

Say no; make sure that the friend knows the risk sheâ€™s asking the CEH to take.

Full Access

Question # 70

A consultant has been hired by the V.P. of a large financial organization to assess the company's security posture. During the security testing, the consultant comes across child pornography on the V.P.'s computer. What is the consultant's obligation to the financial organization?

Say nothing and continue with the security testing.

Stop work immediately and contact the authorities.

Delete the pornography, say nothing, and continue security testing.

Bring the discovery to the financial organization's human resource department.

Full Access

Question # 71

International Organization for Standardization (ISO) standard 27002 provides guidance for compliance by outlining

guidelines and practices for security controls.

financial soundness and business viability metrics.

standard best practice for configuration management.

contract agreement writing standards.

Full Access