Certified Ethical Hacker (CEH) Study Guide

Appendix A. Practice Exam

1. A new network administrator is asked to schedule daily scans of systems throughout the enterprise. Which of the following programming languages has an OSI-approved open source license and is commonly used for accomplishing this goal?

   1. ASP.NET

   2. PHP

   3. C#

   4. Python

2. Which of the following lists security and privacy controls for US government federal information systems?

   1. NIST 800-53

   2. FITARA

   3. HIPAA

   4. ISO 17799

3. The IR team is advised of a potential information spillage from a networked computer. An IR team member at the system disconnects the computer from the network and powers it down. Which step in the incident handling process was just completed?

   1. Recovery

   2. Contain

   3. Eradicate

   4. Identify

4. Which one of the following focuses on protecting customer credit card data?

   1. TCSEC

   2. TNIEG

   3. Common Criteria

   4. PCI DSS

5. Bob is working with senior management to identify the systems and processes that are critical for operations. As part of this business impact assessment, he performs calculations on various systems to place a value on them. On a certain router he discovers the following:

   1. The router costs $3,200 to purchase.

   2. The router typically fails once every three years.

   3. The salary for a technician to repair a server failure is $35 an hour, and it typically takes one technician two hours to fully restore a failure.

   4. Without access outside their subnet, 15 employees averaging $20 an hour will be at a standstill during an outage.

   What ...