Information Systems Security CPEH-001 Release Date

Certified Professional Ethical Hacker (CPEH) Questions and Answers

Question 53

International Organization for Standardization (ISO) standard 27002 provides guidance for compliance by outlining

guidelines and practices for security controls.

financial soundness and business viability metrics.

standard best practice for configuration management.

contract agreement writing standards.

Question 54

What are the three types of compliance that the Open Source Security Testing Methodology Manual (OSSTMM) recognizes?

Legal, performance, audit

Audit, standards based, regulatory

Contractual, regulatory, industry

Legislative, contractual, standards based

Question 55

SOAP services use which technology to format information?

SATA

PCI

XML

ISDN

Question 56

Which vital role does the U.S. Computer Security Incident Response Team (CSIRT) provide?

Incident response services to any user, company, government agency, or organization in partnership with the Department of Homeland Security

Maintenance of the nation’s Internet infrastructure, builds out new Internet infrastructure, and decommissions old Internet infrastructure

Registration of critical penetration testing for the Department of Homeland Security and public and private sectors

Measurement of key vulnerability assessments on behalf of the Department of Defense (DOD) and State Department, as well as private sectors