CPEH-001 Exam Dumps - Certified Professional Ethical Hacker (CPEH)

Go to page:

<< First
Prev
1
2
3
4
5
6
7
8
9
10
Next
Last >>

Question # 4

Which of the following processes of PKI (Public Key Infrastructure) ensures that a trust relationship exists and that a certificate is still valid for specific operations?

Certificate issuance

Certificate validation

Certificate cryptography

Certificate revocation

Full Access

Question # 5

A consultant has been hired by the V.P. of a large financial organization to assess the company's security posture. During the security testing, the consultant comes across child pornography on the V.P.'s computer. What is the consultant's obligation to the financial organization?

Say nothing and continue with the security testing.

Stop work immediately and contact the authorities.

Delete the pornography, say nothing, and continue security testing.

Bring the discovery to the financial organization's human resource department.

Full Access

Question # 6

Which of the following defines the role of a root Certificate Authority (CA) in a Public Key Infrastructure (PKI)?

The root CA is the recovery agent used to encrypt data when a user's certificate is lost.

The root CA stores the user's hash value for safekeeping.

The CA is the trusted root that issues certificates.

The root CA is used to encrypt email messages to prevent unintended disclosure of data.

Full Access

Question # 7

When comparing the testing methodologies of Open Web Application Security Project (OWASP) and Open Source Security Testing Methodology Manual (OSSTMM) the main difference is

OWASP is for web applications and OSSTMM does not include web applications.

OSSTMM is gray box testing and OWASP is black box testing.

OWASP addresses controls and OSSTMM does not.

OSSTMM addresses controls and OWASP does not.

Full Access

Question # 8

Which of the following items is unique to the N-tier architecture method of designing software applications?

Application layers can be separated, allowing each layer to be upgraded independently from other layers.

It is compatible with various databases including Access, Oracle, and SQL.

Data security is tied into each layer and must be updated for all layers when any upgrade is performed.

Application layers can be written in C, ASP.NET, or Delphi without any performance loss.

Full Access