CyberRevision
Continue revision → ← Subjects
CEH v13 · 20 official modules

All 5,000 CEH questions.

Search original practice content, filter by EC-Council module or exam domain, and open any question in revision mode.

0 answered overall

Showing 201–250 of 5,000 matching questions

50 per page
0201
Module 1 · Foundation Domain 1 · Background exploit Unanswered

During an authorized retail-company assessment (RET-LAB-M01-201), which statement most accurately defines "exploit"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. The confidentiality, integrity, and availability objectives used to reason about information security.
  3. Code or a technique that takes advantage of a vulnerability to produce unintended behavior.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
0202
Module 1 · Foundation Domain 1 · Background exploit Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-202), which statement most accurately defines "exploit"?

View answer choices
  1. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  2. Code or a technique that takes advantage of a vulnerability to produce unintended behavior.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
0203
Module 1 · Foundation Domain 1 · Background exploit Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-203), which statement most accurately defines "exploit"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. Code or a technique that takes advantage of a vulnerability to produce unintended behavior.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
0204
Module 1 · Applied Domain 1 · Background exploit Unanswered

During a financial-services purple-team test (FIN-PT-M01-204), which statement most accurately defines "exploit"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. Code or a technique that takes advantage of a vulnerability to produce unintended behavior.
Practice →
0205
Module 1 · Applied Domain 1 · Background exploit Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-205), which statement most accurately defines "exploit"?

View answer choices
  1. Code or a technique that takes advantage of a vulnerability to produce unintended behavior.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
0206
Module 1 · Applied Domain 1 · Background exploit Unanswered

During a government risk-validation project (GOV-RISK-M01-206), which statement most accurately defines "exploit"?

View answer choices
  1. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  2. Code or a technique that takes advantage of a vulnerability to produce unintended behavior.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
0207
Module 1 · Applied Domain 1 · Background exploit Unanswered

During an e-commerce application review (ECOM-WEB-M01-207), which statement most accurately defines "exploit"?

View answer choices
  1. Code or a technique that takes advantage of a vulnerability to produce unintended behavior.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
0208
Module 1 · Advanced Domain 1 · Background exploit Unanswered

During a manufacturing and OT security review (MFG-OT-M01-208), which statement most accurately defines "exploit"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. Code or a technique that takes advantage of a vulnerability to produce unintended behavior.
Practice →
0209
Module 1 · Advanced Domain 1 · Background exploit Unanswered

During a mobile-services penetration test (MOB-TEST-M01-209), which statement most accurately defines "exploit"?

View answer choices
  1. Code or a technique that takes advantage of a vulnerability to produce unintended behavior.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
0210
Module 1 · Advanced Domain 1 · Background exploit Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-210), which statement most accurately defines "exploit"?

View answer choices
  1. Code or a technique that takes advantage of a vulnerability to produce unintended behavior.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
0211
Module 1 · Foundation Domain 1 · Background exploit Unanswered

During an authorized retail-company assessment (RET-LAB-M01-211), which risk is most directly associated with "exploit"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Successful exploitation can turn a theoretical weakness into system compromise.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
0212
Module 1 · Foundation Domain 1 · Background exploit Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-212), which risk is most directly associated with "exploit"?

View answer choices
  1. Successful exploitation can turn a theoretical weakness into system compromise.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
0213
Module 1 · Foundation Domain 1 · Background exploit Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-213), which risk is most directly associated with "exploit"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Successful exploitation can turn a theoretical weakness into system compromise.
Practice →
0214
Module 1 · Applied Domain 1 · Background exploit Unanswered

During a financial-services purple-team test (FIN-PT-M01-214), which risk is most directly associated with "exploit"?

View answer choices
  1. Successful exploitation can turn a theoretical weakness into system compromise.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
0215
Module 1 · Applied Domain 1 · Background exploit Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-215), which risk is most directly associated with "exploit"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Successful exploitation can turn a theoretical weakness into system compromise.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
0216
Module 1 · Applied Domain 1 · Background exploit Unanswered

During a government risk-validation project (GOV-RISK-M01-216), which risk is most directly associated with "exploit"?

View answer choices
  1. Successful exploitation can turn a theoretical weakness into system compromise.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
0217
Module 1 · Applied Domain 1 · Background exploit Unanswered

During an e-commerce application review (ECOM-WEB-M01-217), which risk is most directly associated with "exploit"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Successful exploitation can turn a theoretical weakness into system compromise.
Practice →
0218
Module 1 · Advanced Domain 1 · Background exploit Unanswered

During a manufacturing and OT security review (MFG-OT-M01-218), which risk is most directly associated with "exploit"?

View answer choices
  1. Successful exploitation can turn a theoretical weakness into system compromise.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
0219
Module 1 · Advanced Domain 1 · Background exploit Unanswered

During a mobile-services penetration test (MOB-TEST-M01-219), which risk is most directly associated with "exploit"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Successful exploitation can turn a theoretical weakness into system compromise.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
0220
Module 1 · Advanced Domain 1 · Background exploit Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-220), which risk is most directly associated with "exploit"?

View answer choices
  1. Successful exploitation can turn a theoretical weakness into system compromise.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
0221
Module 1 · Foundation Domain 1 · Background exploit Unanswered

During an authorized retail-company assessment (RET-LAB-M01-221), which action most directly controls the risk related to "exploit"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Patch the root vulnerability and apply compensating controls until remediation is complete.
Practice →
0222
Module 1 · Foundation Domain 1 · Background exploit Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-222), which action most directly controls the risk related to "exploit"?

View answer choices
  1. Patch the root vulnerability and apply compensating controls until remediation is complete.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
0223
Module 1 · Foundation Domain 1 · Background exploit Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-223), which action most directly controls the risk related to "exploit"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Patch the root vulnerability and apply compensating controls until remediation is complete.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
0224
Module 1 · Applied Domain 1 · Background exploit Unanswered

During a financial-services purple-team test (FIN-PT-M01-224), which action most directly controls the risk related to "exploit"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Patch the root vulnerability and apply compensating controls until remediation is complete.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
0225
Module 1 · Applied Domain 1 · Background exploit Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-225), which action most directly controls the risk related to "exploit"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Patch the root vulnerability and apply compensating controls until remediation is complete.
Practice →
0226
Module 1 · Applied Domain 1 · Background exploit Unanswered

During a government risk-validation project (GOV-RISK-M01-226), which action most directly controls the risk related to "exploit"?

View answer choices
  1. Patch the root vulnerability and apply compensating controls until remediation is complete.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
0227
Module 1 · Applied Domain 1 · Background exploit Unanswered

During an e-commerce application review (ECOM-WEB-M01-227), which action most directly controls the risk related to "exploit"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Patch the root vulnerability and apply compensating controls until remediation is complete.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
0228
Module 1 · Advanced Domain 1 · Background exploit Unanswered

During a manufacturing and OT security review (MFG-OT-M01-228), which action most directly controls the risk related to "exploit"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Patch the root vulnerability and apply compensating controls until remediation is complete.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
0229
Module 1 · Advanced Domain 1 · Background exploit Unanswered

During a mobile-services penetration test (MOB-TEST-M01-229), which action most directly controls the risk related to "exploit"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Patch the root vulnerability and apply compensating controls until remediation is complete.
Practice →
0230
Module 1 · Advanced Domain 1 · Background exploit Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-230), which action most directly controls the risk related to "exploit"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Patch the root vulnerability and apply compensating controls until remediation is complete.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
0231
Module 1 · Foundation Domain 1 · Background exploit Unanswered

During an authorized retail-company assessment (RET-LAB-M01-231), which evidence best supports an assessment of "exploit"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A controlled proof of impact captured inside the authorized scope.
  4. A risk register linking assets to CIA impact ratings.
Practice →
0232
Module 1 · Foundation Domain 1 · Background exploit Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-232), which evidence best supports an assessment of "exploit"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A risk register linking assets to CIA impact ratings.
  4. A controlled proof of impact captured inside the authorized scope.
Practice →
0233
Module 1 · Foundation Domain 1 · Background exploit Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-233), which evidence best supports an assessment of "exploit"?

View answer choices
  1. A controlled proof of impact captured inside the authorized scope.
  2. A risk register linking assets to CIA impact ratings.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
0234
Module 1 · Applied Domain 1 · Background exploit Unanswered

During a financial-services purple-team test (FIN-PT-M01-234), which evidence best supports an assessment of "exploit"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A controlled proof of impact captured inside the authorized scope.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
0235
Module 1 · Applied Domain 1 · Background exploit Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-235), which evidence best supports an assessment of "exploit"?

View answer choices
  1. A controlled proof of impact captured inside the authorized scope.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A risk register linking assets to CIA impact ratings.
Practice →
0236
Module 1 · Applied Domain 1 · Background exploit Unanswered

During a government risk-validation project (GOV-RISK-M01-236), which evidence best supports an assessment of "exploit"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A controlled proof of impact captured inside the authorized scope.
Practice →
0237
Module 1 · Applied Domain 1 · Background exploit Unanswered

During an e-commerce application review (ECOM-WEB-M01-237), which evidence best supports an assessment of "exploit"?

View answer choices
  1. A controlled proof of impact captured inside the authorized scope.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A risk register linking assets to CIA impact ratings.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
0238
Module 1 · Advanced Domain 1 · Background exploit Unanswered

During a manufacturing and OT security review (MFG-OT-M01-238), which evidence best supports an assessment of "exploit"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A controlled proof of impact captured inside the authorized scope.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
0239
Module 1 · Advanced Domain 1 · Background exploit Unanswered

During a mobile-services penetration test (MOB-TEST-M01-239), which evidence best supports an assessment of "exploit"?

View answer choices
  1. A controlled proof of impact captured inside the authorized scope.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A risk register linking assets to CIA impact ratings.
Practice →
0240
Module 1 · Advanced Domain 1 · Background exploit Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-240), which evidence best supports an assessment of "exploit"?

View answer choices
  1. A controlled proof of impact captured inside the authorized scope.
  2. A risk register linking assets to CIA impact ratings.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
0241
Module 1 · Foundation Domain 1 · Background threat Unanswered

During an authorized retail-company assessment (RET-LAB-M01-241), which statement most accurately defines "threat"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A circumstance or actor capable of exploiting a weakness and causing harm.
Practice →
0242
Module 1 · Foundation Domain 1 · Background threat Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-242), which statement most accurately defines "threat"?

View answer choices
  1. A circumstance or actor capable of exploiting a weakness and causing harm.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A staged model describing adversary activity from reconnaissance through actions on objectives.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
0243
Module 1 · Foundation Domain 1 · Background threat Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-243), which statement most accurately defines "threat"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. A circumstance or actor capable of exploiting a weakness and causing harm.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
0244
Module 1 · Applied Domain 1 · Background threat Unanswered

During a financial-services purple-team test (FIN-PT-M01-244), which statement most accurately defines "threat"?

View answer choices
  1. A circumstance or actor capable of exploiting a weakness and causing harm.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
0245
Module 1 · Applied Domain 1 · Background threat Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-245), which statement most accurately defines "threat"?

View answer choices
  1. A staged model describing adversary activity from reconnaissance through actions on objectives.
  2. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A circumstance or actor capable of exploiting a weakness and causing harm.
Practice →
0246
Module 1 · Applied Domain 1 · Background threat Unanswered

During a government risk-validation project (GOV-RISK-M01-246), which statement most accurately defines "threat"?

View answer choices
  1. A circumstance or actor capable of exploiting a weakness and causing harm.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. The confidentiality, integrity, and availability objectives used to reason about information security.
Practice →
0247
Module 1 · Applied Domain 1 · Background threat Unanswered

During an e-commerce application review (ECOM-WEB-M01-247), which statement most accurately defines "threat"?

View answer choices
  1. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  2. A circumstance or actor capable of exploiting a weakness and causing harm.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →
0248
Module 1 · Advanced Domain 1 · Background threat Unanswered

During a manufacturing and OT security review (MFG-OT-M01-248), which statement most accurately defines "threat"?

View answer choices
  1. A circumstance or actor capable of exploiting a weakness and causing harm.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A knowledge base that organizes adversary tactics and techniques from observed behavior.
Practice →
0249
Module 1 · Advanced Domain 1 · Background threat Unanswered

During a mobile-services penetration test (MOB-TEST-M01-249), which statement most accurately defines "threat"?

View answer choices
  1. The confidentiality, integrity, and availability objectives used to reason about information security.
  2. A staged model describing adversary activity from reconnaissance through actions on objectives.
  3. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  4. A circumstance or actor capable of exploiting a weakness and causing harm.
Practice →
0250
Module 1 · Advanced Domain 1 · Background threat Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-250), which statement most accurately defines "threat"?

View answer choices
  1. A knowledge base that organizes adversary tactics and techniques from observed behavior.
  2. A circumstance or actor capable of exploiting a weakness and causing harm.
  3. The confidentiality, integrity, and availability objectives used to reason about information security.
  4. A staged model describing adversary activity from reconnaissance through actions on objectives.
Practice →