CEH v13 · 20 official modules

All 5,000 CEH questions.

Search original practice content, filter by EC-Council module or exam domain, and open any question in revision mode.

0 answered overall

Showing 151–200 of 5,000 matching questions

50 per page
0151
Module 1 · Foundation Domain 1 · Background AI-driven ethical hacking Unanswered

During an authorized retail-company assessment (RET-LAB-M01-151), which evidence best supports an assessment of "AI-driven ethical hacking"?

View answer choices
  1. An audit trail linking prompts, source evidence, model output, human validation, and approved actions.
  2. A screenshot with no prompt or source context.
  3. An undocumented statement that AI was used.
  4. Only the marketing name of the AI model.
Practice
0152
Module 1 · Foundation Domain 1 · Background AI-driven ethical hacking Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-152), which evidence best supports an assessment of "AI-driven ethical hacking"?

View answer choices
  1. A screenshot with no prompt or source context.
  2. An undocumented statement that AI was used.
  3. Only the marketing name of the AI model.
  4. An audit trail linking prompts, source evidence, model output, human validation, and approved actions.
Practice
0153
Module 1 · Foundation Domain 1 · Background AI-driven ethical hacking Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-153), which evidence best supports an assessment of "AI-driven ethical hacking"?

View answer choices
  1. A screenshot with no prompt or source context.
  2. Only the marketing name of the AI model.
  3. An audit trail linking prompts, source evidence, model output, human validation, and approved actions.
  4. An undocumented statement that AI was used.
Practice
0154
Module 1 · Applied Domain 1 · Background AI-driven ethical hacking Unanswered

During a financial-services purple-team test (FIN-PT-M01-154), which evidence best supports an assessment of "AI-driven ethical hacking"?

View answer choices
  1. An undocumented statement that AI was used.
  2. An audit trail linking prompts, source evidence, model output, human validation, and approved actions.
  3. Only the marketing name of the AI model.
  4. A screenshot with no prompt or source context.
Practice
0155
Module 1 · Applied Domain 1 · Background AI-driven ethical hacking Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-155), which evidence best supports an assessment of "AI-driven ethical hacking"?

View answer choices
  1. An audit trail linking prompts, source evidence, model output, human validation, and approved actions.
  2. An undocumented statement that AI was used.
  3. A screenshot with no prompt or source context.
  4. Only the marketing name of the AI model.
Practice
0156
Module 1 · Applied Domain 1 · Background AI-driven ethical hacking Unanswered

During a government risk-validation project (GOV-RISK-M01-156), which evidence best supports an assessment of "AI-driven ethical hacking"?

View answer choices
  1. Only the marketing name of the AI model.
  2. A screenshot with no prompt or source context.
  3. An undocumented statement that AI was used.
  4. An audit trail linking prompts, source evidence, model output, human validation, and approved actions.
Practice
0157
Module 1 · Applied Domain 1 · Background AI-driven ethical hacking Unanswered

During an e-commerce application review (ECOM-WEB-M01-157), which evidence best supports an assessment of "AI-driven ethical hacking"?

View answer choices
  1. An audit trail linking prompts, source evidence, model output, human validation, and approved actions.
  2. Only the marketing name of the AI model.
  3. A screenshot with no prompt or source context.
  4. An undocumented statement that AI was used.
Practice
0158
Module 1 · Advanced Domain 1 · Background AI-driven ethical hacking Unanswered

During a manufacturing and OT security review (MFG-OT-M01-158), which evidence best supports an assessment of "AI-driven ethical hacking"?

View answer choices
  1. Only the marketing name of the AI model.
  2. An audit trail linking prompts, source evidence, model output, human validation, and approved actions.
  3. An undocumented statement that AI was used.
  4. A screenshot with no prompt or source context.
Practice
0159
Module 1 · Advanced Domain 1 · Background AI-driven ethical hacking Unanswered

During a mobile-services penetration test (MOB-TEST-M01-159), which evidence best supports an assessment of "AI-driven ethical hacking"?

View answer choices
  1. An audit trail linking prompts, source evidence, model output, human validation, and approved actions.
  2. An undocumented statement that AI was used.
  3. A screenshot with no prompt or source context.
  4. Only the marketing name of the AI model.
Practice
0160
Module 1 · Advanced Domain 1 · Background AI-driven ethical hacking Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-160), which evidence best supports an assessment of "AI-driven ethical hacking"?

View answer choices
  1. A screenshot with no prompt or source context.
  2. An undocumented statement that AI was used.
  3. Only the marketing name of the AI model.
  4. An audit trail linking prompts, source evidence, model output, human validation, and approved actions.
Practice
0161
Module 1 · Foundation Domain 1 · Background ethical hacking Unanswered

During an authorized retail-company assessment (RET-LAB-M01-161), which statement most accurately defines "ethical hacking"?

View answer choices
  1. Authorized security testing that uses attacker techniques to identify and help remediate weaknesses.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice
0162
Module 1 · Foundation Domain 1 · Background ethical hacking Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-162), which statement most accurately defines "ethical hacking"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. Authorized security testing that uses attacker techniques to identify and help remediate weaknesses.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice
0163
Module 1 · Foundation Domain 1 · Background ethical hacking Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-163), which statement most accurately defines "ethical hacking"?

View answer choices
  1. Authorized security testing that uses attacker techniques to identify and help remediate weaknesses.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice
0164
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During a financial-services purple-team test (FIN-PT-M01-164), which statement most accurately defines "ethical hacking"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. Authorized security testing that uses attacker techniques to identify and help remediate weaknesses.
Practice
0165
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-165), which statement most accurately defines "ethical hacking"?

View answer choices
  1. Authorized security testing that uses attacker techniques to identify and help remediate weaknesses.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice
0166
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During a government risk-validation project (GOV-RISK-M01-166), which statement most accurately defines "ethical hacking"?

View answer choices
  1. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  2. Authorized security testing that uses attacker techniques to identify and help remediate weaknesses.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice
0167
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During an e-commerce application review (ECOM-WEB-M01-167), which statement most accurately defines "ethical hacking"?

View answer choices
  1. Authorized security testing that uses attacker techniques to identify and help remediate weaknesses.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice
0168
Module 1 · Advanced Domain 1 · Background ethical hacking Unanswered

During a manufacturing and OT security review (MFG-OT-M01-168), which statement most accurately defines "ethical hacking"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. Authorized security testing that uses attacker techniques to identify and help remediate weaknesses.
Practice
0169
Module 1 · Advanced Domain 1 · Background ethical hacking Unanswered

During a mobile-services penetration test (MOB-TEST-M01-169), which statement most accurately defines "ethical hacking"?

View answer choices
  1. Authorized security testing that uses attacker techniques to identify and help remediate weaknesses.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice
0170
Module 1 · Advanced Domain 1 · Background ethical hacking Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-170), which statement most accurately defines "ethical hacking"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. Authorized security testing that uses attacker techniques to identify and help remediate weaknesses.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice
0171
Module 1 · Foundation Domain 1 · Background ethical hacking Unanswered

During an authorized retail-company assessment (RET-LAB-M01-171), which risk is most directly associated with "ethical hacking"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Testing without permission can cause harm and create civil or criminal liability.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice
0172
Module 1 · Foundation Domain 1 · Background ethical hacking Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-172), which risk is most directly associated with "ethical hacking"?

View answer choices
  1. Testing without permission can cause harm and create civil or criminal liability.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice
0173
Module 1 · Foundation Domain 1 · Background ethical hacking Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-173), which risk is most directly associated with "ethical hacking"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Testing without permission can cause harm and create civil or criminal liability.
Practice
0174
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During a financial-services purple-team test (FIN-PT-M01-174), which risk is most directly associated with "ethical hacking"?

View answer choices
  1. Testing without permission can cause harm and create civil or criminal liability.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice
0175
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-175), which risk is most directly associated with "ethical hacking"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Testing without permission can cause harm and create civil or criminal liability.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice
0176
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During a government risk-validation project (GOV-RISK-M01-176), which risk is most directly associated with "ethical hacking"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Testing without permission can cause harm and create civil or criminal liability.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice
0177
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During an e-commerce application review (ECOM-WEB-M01-177), which risk is most directly associated with "ethical hacking"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Testing without permission can cause harm and create civil or criminal liability.
Practice
0178
Module 1 · Advanced Domain 1 · Background ethical hacking Unanswered

During a manufacturing and OT security review (MFG-OT-M01-178), which risk is most directly associated with "ethical hacking"?

View answer choices
  1. Testing without permission can cause harm and create civil or criminal liability.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice
0179
Module 1 · Advanced Domain 1 · Background ethical hacking Unanswered

During a mobile-services penetration test (MOB-TEST-M01-179), which risk is most directly associated with "ethical hacking"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Testing without permission can cause harm and create civil or criminal liability.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice
0180
Module 1 · Advanced Domain 1 · Background ethical hacking Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-180), which risk is most directly associated with "ethical hacking"?

View answer choices
  1. Testing without permission can cause harm and create civil or criminal liability.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice
0181
Module 1 · Foundation Domain 1 · Background ethical hacking Unanswered

During an authorized retail-company assessment (RET-LAB-M01-181), which action most directly controls the risk related to "ethical hacking"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Obtain written authorization, scope, and rules of engagement before testing.
Practice
0182
Module 1 · Foundation Domain 1 · Background ethical hacking Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-182), which action most directly controls the risk related to "ethical hacking"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Obtain written authorization, scope, and rules of engagement before testing.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice
0183
Module 1 · Foundation Domain 1 · Background ethical hacking Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-183), which action most directly controls the risk related to "ethical hacking"?

View answer choices
  1. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  2. Obtain written authorization, scope, and rules of engagement before testing.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice
0184
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During a financial-services purple-team test (FIN-PT-M01-184), which action most directly controls the risk related to "ethical hacking"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Obtain written authorization, scope, and rules of engagement before testing.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice
0185
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-185), which action most directly controls the risk related to "ethical hacking"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Obtain written authorization, scope, and rules of engagement before testing.
Practice
0186
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During a government risk-validation project (GOV-RISK-M01-186), which action most directly controls the risk related to "ethical hacking"?

View answer choices
  1. Obtain written authorization, scope, and rules of engagement before testing.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice
0187
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During an e-commerce application review (ECOM-WEB-M01-187), which action most directly controls the risk related to "ethical hacking"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Obtain written authorization, scope, and rules of engagement before testing.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice
0188
Module 1 · Advanced Domain 1 · Background ethical hacking Unanswered

During a manufacturing and OT security review (MFG-OT-M01-188), which action most directly controls the risk related to "ethical hacking"?

View answer choices
  1. Obtain written authorization, scope, and rules of engagement before testing.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice
0189
Module 1 · Advanced Domain 1 · Background ethical hacking Unanswered

During a mobile-services penetration test (MOB-TEST-M01-189), which action most directly controls the risk related to "ethical hacking"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Obtain written authorization, scope, and rules of engagement before testing.
Practice
0190
Module 1 · Advanced Domain 1 · Background ethical hacking Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-190), which action most directly controls the risk related to "ethical hacking"?

View answer choices
  1. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  2. Obtain written authorization, scope, and rules of engagement before testing.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice
0191
Module 1 · Foundation Domain 1 · Background ethical hacking Unanswered

During an authorized retail-company assessment (RET-LAB-M01-191), which evidence best supports an assessment of "ethical hacking"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A signed authorization and rules-of-engagement document.
  4. A risk register linking assets to CIA impact ratings.
Practice
0192
Module 1 · Foundation Domain 1 · Background ethical hacking Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-192), which evidence best supports an assessment of "ethical hacking"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A signed authorization and rules-of-engagement document.
Practice
0193
Module 1 · Foundation Domain 1 · Background ethical hacking Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-193), which evidence best supports an assessment of "ethical hacking"?

View answer choices
  1. A signed authorization and rules-of-engagement document.
  2. A risk register linking assets to CIA impact ratings.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice
0194
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During a financial-services purple-team test (FIN-PT-M01-194), which evidence best supports an assessment of "ethical hacking"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A signed authorization and rules-of-engagement document.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice
0195
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-195), which evidence best supports an assessment of "ethical hacking"?

View answer choices
  1. A signed authorization and rules-of-engagement document.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A risk register linking assets to CIA impact ratings.
Practice
0196
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During a government risk-validation project (GOV-RISK-M01-196), which evidence best supports an assessment of "ethical hacking"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A signed authorization and rules-of-engagement document.
Practice
0197
Module 1 · Applied Domain 1 · Background ethical hacking Unanswered

During an e-commerce application review (ECOM-WEB-M01-197), which evidence best supports an assessment of "ethical hacking"?

View answer choices
  1. A signed authorization and rules-of-engagement document.
  2. A risk register linking assets to CIA impact ratings.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice
0198
Module 1 · Advanced Domain 1 · Background ethical hacking Unanswered

During a manufacturing and OT security review (MFG-OT-M01-198), which evidence best supports an assessment of "ethical hacking"?

View answer choices
  1. A detection matrix showing covered and uncovered ATT&CK techniques.
  2. A signed authorization and rules-of-engagement document.
  3. A risk register linking assets to CIA impact ratings.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice
0199
Module 1 · Advanced Domain 1 · Background ethical hacking Unanswered

During a mobile-services penetration test (MOB-TEST-M01-199), which evidence best supports an assessment of "ethical hacking"?

View answer choices
  1. A signed authorization and rules-of-engagement document.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A risk register linking assets to CIA impact ratings.
Practice
0200
Module 1 · Advanced Domain 1 · Background ethical hacking Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-200), which evidence best supports an assessment of "ethical hacking"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A signed authorization and rules-of-engagement document.
Practice