Free CPEH-001 Exam Braindumps
Certified Professional Ethical Hacker (CPEH) Exam Questions 451–455 (page: 92)

Updated On: 9-Feb-2026

Which of the following is a component of a risk assessment?

  1. Physical security
  2. Administrative safeguards
  3. DMZ
  4. Logical interface

Answer(s): B



What information should an IT system analysis provide to the risk assessor?

  1. Management buy-in
  2. Threat statement
  3. Security architecture
  4. Impact analysis

Answer(s): C



Which security strategy requires using several, varying methods to protect IT systems against attacks?

  1. Defense in depth
  2. Three-way handshake
  3. Covert channels
  4. Exponential backoff algorithm

Answer(s): A



An IT security engineer notices that the company's web server is currently being hacked.
What should the engineer do next?

  1. Unplug the network connection on the company's web server.
  2. Determine the origin of the attack and launch a counterattack.
  3. Record as much information as possible from the attack.
  4. Perform a system restart on the company's web server.

Answer(s): C



During a penetration test, a tester finds a target that is running MS SQL 2000 with default credentials. The tester assumes that the service is running with Local System account. How can this weakness be exploited to access the system?

  1. Using the Metasploit psexec module setting the SA / Admin credential
  2. Invoking the stored procedure xp_shell to spawn a Windows command shell
  3. Invoking the stored procedure cmd_shell to spawn a Windows command shell
  4. Invoking the stored procedure xp_cmdshell to spawn a Windows command shell

Answer(s): D



Viewing page 92 of 177
Viewing questions 456 - 460 out of 878 questions


Post your Comments and Discuss GAQM CPEH-001 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!