312-50 Certified Ethical Hacker Practice Exam

Sample Questions:

Which United States legislation mandates that the Chief Executive Officer (CEO) and the Chief Financial Officer (CFO) must sign statements verifying the completeness and accuracy of financial reports?

Sarbanes-Oxley Act (SOX)

Gramm-Leach-Bliley Act (GLBA)

Fair and Accurate Credit Transactions Act (FACTA)

Federal Information Security Management Act (FISMA)

How can a policy help improve an employee’s security awareness?

By implementing written security procedures, enabling employee security training, and promoting the benefits of security

By using informal networks of communication, establishing secret passing procedures, and immediately terminating employees

By sharing security secrets with employees, enabling employees to share secrets, and establishing a consultative help line

By decreasing an employee’s vacation time, addressing ad-hoc employment clauses, and ensuring that managers know employee strengths

Which method can provide a better return on IT security investment and provide a thorough and comprehensive assessment of organizational security covering policy, procedure design, and implementation?

Penetration testing

Social engineering

Vulnerability scanning

Access control list reviews

Which of the following guidelines or standards is associated with the credit card industry?

Control Objectives for Information and Related Technology (COBIT)

Sarbanes-Oxley Act (SOX)

Health Insurance Portability and Accountability Act (HIPAA)

Payment Card Industry Data Security Standards (PCI DSS)

International Organization for Standardization (ISO) standard 27002 provides guidance for compliance by outlining

guidelines and practices for security controls.

financial soundness and business viability metrics.

standard best practice for configuration management.

contract agreement writing standards.