QUESTION: 441

Which of the following resources does NMAP need to be used as a basic vulnerability scanner covering several vectors like SMB, HTTP and FTP?

Metasploit scripting engine
Nessus scripting engine
NMAP scripting engine
SAINT scripting engine

Answer(s): C

Reveal Solution Next Question

A penetration tester is hired to do a risk assessment of a company's DMZ. The rules of engagement states that the penetration test be done from an external IP address with no prior knowledge of the internal IT systems. What kind of test is being performed?

white box
grey box
red box
black box

Answer(s): D

Reveal Solution Next Question

QUESTION: 443

How can a policy help improve an employee's security awareness?

By implementing written security procedures, enabling employee security training, and promoting the benefits of security
By using informal networks of communication, establishing secret passing procedures, and immediately terminating employees
By sharing security secrets with employees, enabling employees to share secrets, and establishing a consultative help line
By decreasing an employee's vacation time, addressing ad-hoc employment clauses, and ensuring that managers know employee strengths

Answer(s): A

Reveal Solution Next Question

QUESTION: 444

Which statement is TRUE regarding network firewalls preventing Web Application attacks?

Network firewalls can prevent attacks because they can detect malicious HTTP traffic.
Network firewalls cannot prevent attacks because ports 80 and 443 must be opened.
Network firewalls can prevent attacks if they are properly configured.
Network firewalls cannot prevent attacks because they are too complex to configure.

Answer(s): B

Reveal Solution Next Question

Free CPEH-001 Exam Braindumps (page: 111)

QUESTION: 441

QUESTION: 442

QUESTION: 443

QUESTION: 444