Helping Hand Questions for 312-50

Ethical Hacking and Countermeasures Questions and Answers

Question 41

A certified ethical hacker (CEH) completed a penetration test of the main headquarters of a company almost two months ago, but has yet to get paid. The customer is suffering from financial problems, and the CEH is worried that the company will go out of business and end up not paying. What actions should the CEH take?

Options:

Threaten to publish the penetration test results if not paid.

Follow proper legal procedures against the company to request payment.

Tell other customers of the financial problems with payments from this company.

Exploit some of the vulnerabilities found on the company webserver to deface it.

Question 42

A consultant has been hired by the V.P. of a large financial organization to assess the company's security posture. During the security testing, the consultant comes across child pornography on the V.P.'s computer. What is the consultant's obligation to the financial organization?

Options:

Say nothing and continue with the security testing.

Stop work immediately and contact the authorities.

Delete the pornography, say nothing, and continue security testing.

Bring the discovery to the financial organization's human resource department.

Question 43

When comparing the testing methodologies of Open Web Application Security Project (OWASP) and Open Source Security Testing Methodology Manual (OSSTMM) the main difference is

Options:

OWASP is for web applications and OSSTMM does not include web applications.

OSSTMM is gray box testing and OWASP is black box testing.

OWASP addresses controls and OSSTMM does not.

OSSTMM addresses controls and OWASP does not.

Question 44

Which of the following items is unique to the N-tier architecture method of designing software applications?

Options:

Application layers can be separated, allowing each layer to be upgraded independently from other layers.

It is compatible with various databases including Access, Oracle, and SQL.

Data security is tied into each layer and must be updated for all layers when any upgrade is performed.

Application layers can be written in C, ASP.NET, or Delphi without any performance loss.

Winter Special - Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: top65certs

Ethical Hacking and Countermeasures Questions and Answers

Options:

Answer:

Options:

Answer:

Options:

Answer:

Options:

Answer:

CompTIA

Fortinet

Microsoft

Salesforce