CyberRevision
Continue revision → ← Subjects
CEH v13 · 20 official modules

All 5,000 CEH questions.

Search original practice content, filter by EC-Council module or exam domain, and open any question in revision mode.

0 answered overall

Showing 251–300 of 5,000 matching questions

50 per page
0251
Module 1 · Foundation Domain 1 · Background threat Unanswered

During an authorized retail-company assessment (RET-LAB-M01-251), which risk is most directly associated with "threat"?

View answer choices
  1. Unmodeled threat actors or events leave defensive priorities disconnected from likely harm.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
0252
Module 1 · Foundation Domain 1 · Background threat Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-252), which risk is most directly associated with "threat"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Unmodeled threat actors or events leave defensive priorities disconnected from likely harm.
Practice →
0253
Module 1 · Foundation Domain 1 · Background threat Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-253), which risk is most directly associated with "threat"?

View answer choices
  1. Unmodeled threat actors or events leave defensive priorities disconnected from likely harm.
  2. A control focused on only one objective can leave the other security objectives exposed.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
0254
Module 1 · Applied Domain 1 · Background threat Unanswered

During a financial-services purple-team test (FIN-PT-M01-254), which risk is most directly associated with "threat"?

View answer choices
  1. Unmapped detections can leave important adversary techniques without coverage.
  2. Unmodeled threat actors or events leave defensive priorities disconnected from likely harm.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
0255
Module 1 · Applied Domain 1 · Background threat Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-255), which risk is most directly associated with "threat"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Unmodeled threat actors or events leave defensive priorities disconnected from likely harm.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
0256
Module 1 · Applied Domain 1 · Background threat Unanswered

During a government risk-validation project (GOV-RISK-M01-256), which risk is most directly associated with "threat"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  4. Unmodeled threat actors or events leave defensive priorities disconnected from likely harm.
Practice →
0257
Module 1 · Applied Domain 1 · Background threat Unanswered

During an e-commerce application review (ECOM-WEB-M01-257), which risk is most directly associated with "threat"?

View answer choices
  1. Unmodeled threat actors or events leave defensive priorities disconnected from likely harm.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Unmapped detections can leave important adversary techniques without coverage.
Practice →
0258
Module 1 · Advanced Domain 1 · Background threat Unanswered

During a manufacturing and OT security review (MFG-OT-M01-258), which risk is most directly associated with "threat"?

View answer choices
  1. A control focused on only one objective can leave the other security objectives exposed.
  2. Unmodeled threat actors or events leave defensive priorities disconnected from likely harm.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
Practice →
0259
Module 1 · Advanced Domain 1 · Background threat Unanswered

During a mobile-services penetration test (MOB-TEST-M01-259), which risk is most directly associated with "threat"?

View answer choices
  1. Unmodeled threat actors or events leave defensive priorities disconnected from likely harm.
  2. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  3. Unmapped detections can leave important adversary techniques without coverage.
  4. A control focused on only one objective can leave the other security objectives exposed.
Practice →
0260
Module 1 · Advanced Domain 1 · Background threat Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-260), which risk is most directly associated with "threat"?

View answer choices
  1. Defenders who monitor only the final stage miss earlier opportunities to interrupt an intrusion.
  2. Unmapped detections can leave important adversary techniques without coverage.
  3. A control focused on only one objective can leave the other security objectives exposed.
  4. Unmodeled threat actors or events leave defensive priorities disconnected from likely harm.
Practice →
0261
Module 1 · Foundation Domain 1 · Background threat Unanswered

During an authorized retail-company assessment (RET-LAB-M01-261), which action most directly controls the risk related to "threat"?

View answer choices
  1. Maintain threat models and update them with current intelligence.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
0262
Module 1 · Foundation Domain 1 · Background threat Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-262), which action most directly controls the risk related to "threat"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Maintain threat models and update them with current intelligence.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
0263
Module 1 · Foundation Domain 1 · Background threat Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-263), which action most directly controls the risk related to "threat"?

View answer choices
  1. Maintain threat models and update them with current intelligence.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
0264
Module 1 · Applied Domain 1 · Background threat Unanswered

During a financial-services purple-team test (FIN-PT-M01-264), which action most directly controls the risk related to "threat"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Maintain threat models and update them with current intelligence.
Practice →
0265
Module 1 · Applied Domain 1 · Background threat Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-265), which action most directly controls the risk related to "threat"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Maintain threat models and update them with current intelligence.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
0266
Module 1 · Applied Domain 1 · Background threat Unanswered

During a government risk-validation project (GOV-RISK-M01-266), which action most directly controls the risk related to "threat"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Maintain threat models and update them with current intelligence.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
0267
Module 1 · Applied Domain 1 · Background threat Unanswered

During an e-commerce application review (ECOM-WEB-M01-267), which action most directly controls the risk related to "threat"?

View answer choices
  1. Maintain threat models and update them with current intelligence.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
0268
Module 1 · Advanced Domain 1 · Background threat Unanswered

During a manufacturing and OT security review (MFG-OT-M01-268), which action most directly controls the risk related to "threat"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Maintain threat models and update them with current intelligence.
Practice →
0269
Module 1 · Advanced Domain 1 · Background threat Unanswered

During a mobile-services penetration test (MOB-TEST-M01-269), which action most directly controls the risk related to "threat"?

View answer choices
  1. Maintain threat models and update them with current intelligence.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
0270
Module 1 · Advanced Domain 1 · Background threat Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-270), which action most directly controls the risk related to "threat"?

View answer choices
  1. Maintain threat models and update them with current intelligence.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
0271
Module 1 · Foundation Domain 1 · Background threat Unanswered

During an authorized retail-company assessment (RET-LAB-M01-271), which evidence best supports an assessment of "threat"?

View answer choices
  1. A detection matrix showing covered and uncovered ATT&CK techniques.
  2. A threat model identifying actors, capabilities, and targeted assets.
  3. A risk register linking assets to CIA impact ratings.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
0272
Module 1 · Foundation Domain 1 · Background threat Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-272), which evidence best supports an assessment of "threat"?

View answer choices
  1. A threat model identifying actors, capabilities, and targeted assets.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A risk register linking assets to CIA impact ratings.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
0273
Module 1 · Foundation Domain 1 · Background threat Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-273), which evidence best supports an assessment of "threat"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A risk register linking assets to CIA impact ratings.
  4. A threat model identifying actors, capabilities, and targeted assets.
Practice →
0274
Module 1 · Applied Domain 1 · Background threat Unanswered

During a financial-services purple-team test (FIN-PT-M01-274), which evidence best supports an assessment of "threat"?

View answer choices
  1. A threat model identifying actors, capabilities, and targeted assets.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A risk register linking assets to CIA impact ratings.
Practice →
0275
Module 1 · Applied Domain 1 · Background threat Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-275), which evidence best supports an assessment of "threat"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A threat model identifying actors, capabilities, and targeted assets.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
0276
Module 1 · Applied Domain 1 · Background threat Unanswered

During a government risk-validation project (GOV-RISK-M01-276), which evidence best supports an assessment of "threat"?

View answer choices
  1. A threat model identifying actors, capabilities, and targeted assets.
  2. A risk register linking assets to CIA impact ratings.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
0277
Module 1 · Applied Domain 1 · Background threat Unanswered

During an e-commerce application review (ECOM-WEB-M01-277), which evidence best supports an assessment of "threat"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A risk register linking assets to CIA impact ratings.
  4. A threat model identifying actors, capabilities, and targeted assets.
Practice →
0278
Module 1 · Advanced Domain 1 · Background threat Unanswered

During a manufacturing and OT security review (MFG-OT-M01-278), which evidence best supports an assessment of "threat"?

View answer choices
  1. A threat model identifying actors, capabilities, and targeted assets.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A risk register linking assets to CIA impact ratings.
Practice →
0279
Module 1 · Advanced Domain 1 · Background threat Unanswered

During a mobile-services penetration test (MOB-TEST-M01-279), which evidence best supports an assessment of "threat"?

View answer choices
  1. A detection matrix showing covered and uncovered ATT&CK techniques.
  2. A threat model identifying actors, capabilities, and targeted assets.
  3. A risk register linking assets to CIA impact ratings.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
0280
Module 1 · Advanced Domain 1 · Background threat Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-280), which evidence best supports an assessment of "threat"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A risk register linking assets to CIA impact ratings.
  3. A threat model identifying actors, capabilities, and targeted assets.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
0281
Module 1 · Foundation Domain 1 · Background prompt injection against AI systems Unanswered

During an authorized retail-company assessment (RET-LAB-M01-281), which statement most accurately defines "prompt injection against AI systems"?

View answer choices
  1. A normal SQL query sent through a prepared statement.
  2. Encryption of a model file with an approved key.
  3. Routine compression of training data.
  4. Manipulation in untrusted input intended to override or redirect an AI system’s instructions.
Practice →
0282
Module 1 · Foundation Domain 1 · Background prompt injection against AI systems Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-282), which statement most accurately defines "prompt injection against AI systems"?

View answer choices
  1. Manipulation in untrusted input intended to override or redirect an AI system’s instructions.
  2. Routine compression of training data.
  3. Encryption of a model file with an approved key.
  4. A normal SQL query sent through a prepared statement.
Practice →
0283
Module 1 · Foundation Domain 1 · Background prompt injection against AI systems Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-283), which statement most accurately defines "prompt injection against AI systems"?

View answer choices
  1. Routine compression of training data.
  2. Manipulation in untrusted input intended to override or redirect an AI system’s instructions.
  3. A normal SQL query sent through a prepared statement.
  4. Encryption of a model file with an approved key.
Practice →
0284
Module 1 · Applied Domain 1 · Background prompt injection against AI systems Unanswered

During a financial-services purple-team test (FIN-PT-M01-284), which statement most accurately defines "prompt injection against AI systems"?

View answer choices
  1. Manipulation in untrusted input intended to override or redirect an AI system’s instructions.
  2. Encryption of a model file with an approved key.
  3. A normal SQL query sent through a prepared statement.
  4. Routine compression of training data.
Practice →
0285
Module 1 · Applied Domain 1 · Background prompt injection against AI systems Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-285), which statement most accurately defines "prompt injection against AI systems"?

View answer choices
  1. A normal SQL query sent through a prepared statement.
  2. Routine compression of training data.
  3. Encryption of a model file with an approved key.
  4. Manipulation in untrusted input intended to override or redirect an AI system’s instructions.
Practice →
0286
Module 1 · Applied Domain 1 · Background prompt injection against AI systems Unanswered

During a government risk-validation project (GOV-RISK-M01-286), which statement most accurately defines "prompt injection against AI systems"?

View answer choices
  1. Encryption of a model file with an approved key.
  2. Routine compression of training data.
  3. Manipulation in untrusted input intended to override or redirect an AI system’s instructions.
  4. A normal SQL query sent through a prepared statement.
Practice →
0287
Module 1 · Applied Domain 1 · Background prompt injection against AI systems Unanswered

During an e-commerce application review (ECOM-WEB-M01-287), which statement most accurately defines "prompt injection against AI systems"?

View answer choices
  1. Routine compression of training data.
  2. Manipulation in untrusted input intended to override or redirect an AI system’s instructions.
  3. A normal SQL query sent through a prepared statement.
  4. Encryption of a model file with an approved key.
Practice →
0288
Module 1 · Advanced Domain 1 · Background prompt injection against AI systems Unanswered

During a manufacturing and OT security review (MFG-OT-M01-288), which statement most accurately defines "prompt injection against AI systems"?

View answer choices
  1. Manipulation in untrusted input intended to override or redirect an AI system’s instructions.
  2. Encryption of a model file with an approved key.
  3. A normal SQL query sent through a prepared statement.
  4. Routine compression of training data.
Practice →
0289
Module 1 · Advanced Domain 1 · Background prompt injection against AI systems Unanswered

During a mobile-services penetration test (MOB-TEST-M01-289), which statement most accurately defines "prompt injection against AI systems"?

View answer choices
  1. A normal SQL query sent through a prepared statement.
  2. Routine compression of training data.
  3. Encryption of a model file with an approved key.
  4. Manipulation in untrusted input intended to override or redirect an AI system’s instructions.
Practice →
0290
Module 1 · Advanced Domain 1 · Background prompt injection against AI systems Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-290), which statement most accurately defines "prompt injection against AI systems"?

View answer choices
  1. A normal SQL query sent through a prepared statement.
  2. Manipulation in untrusted input intended to override or redirect an AI system’s instructions.
  3. Routine compression of training data.
  4. Encryption of a model file with an approved key.
Practice →
0291
Module 1 · Foundation Domain 1 · Background prompt injection against AI systems Unanswered

During an authorized retail-company assessment (RET-LAB-M01-291), which risk is most directly associated with "prompt injection against AI systems"?

View answer choices
  1. Every certificate authority automatically becomes untrusted.
  2. The database schema is always deleted immediately.
  3. The model may disclose sensitive context, ignore policy, or invoke connected tools in an unsafe way.
  4. The model’s network cable may become physically shorter.
Practice →
0292
Module 1 · Foundation Domain 1 · Background prompt injection against AI systems Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-292), which risk is most directly associated with "prompt injection against AI systems"?

View answer choices
  1. Every certificate authority automatically becomes untrusted.
  2. The database schema is always deleted immediately.
  3. The model’s network cable may become physically shorter.
  4. The model may disclose sensitive context, ignore policy, or invoke connected tools in an unsafe way.
Practice →
0293
Module 1 · Foundation Domain 1 · Background prompt injection against AI systems Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-293), which risk is most directly associated with "prompt injection against AI systems"?

View answer choices
  1. The model may disclose sensitive context, ignore policy, or invoke connected tools in an unsafe way.
  2. The model’s network cable may become physically shorter.
  3. Every certificate authority automatically becomes untrusted.
  4. The database schema is always deleted immediately.
Practice →
0294
Module 1 · Applied Domain 1 · Background prompt injection against AI systems Unanswered

During a financial-services purple-team test (FIN-PT-M01-294), which risk is most directly associated with "prompt injection against AI systems"?

View answer choices
  1. The model’s network cable may become physically shorter.
  2. The model may disclose sensitive context, ignore policy, or invoke connected tools in an unsafe way.
  3. The database schema is always deleted immediately.
  4. Every certificate authority automatically becomes untrusted.
Practice →
0295
Module 1 · Applied Domain 1 · Background prompt injection against AI systems Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-295), which risk is most directly associated with "prompt injection against AI systems"?

View answer choices
  1. The model may disclose sensitive context, ignore policy, or invoke connected tools in an unsafe way.
  2. The database schema is always deleted immediately.
  3. Every certificate authority automatically becomes untrusted.
  4. The model’s network cable may become physically shorter.
Practice →
0296
Module 1 · Applied Domain 1 · Background prompt injection against AI systems Unanswered

During a government risk-validation project (GOV-RISK-M01-296), which risk is most directly associated with "prompt injection against AI systems"?

View answer choices
  1. The model’s network cable may become physically shorter.
  2. The database schema is always deleted immediately.
  3. Every certificate authority automatically becomes untrusted.
  4. The model may disclose sensitive context, ignore policy, or invoke connected tools in an unsafe way.
Practice →
0297
Module 1 · Applied Domain 1 · Background prompt injection against AI systems Unanswered

During an e-commerce application review (ECOM-WEB-M01-297), which risk is most directly associated with "prompt injection against AI systems"?

View answer choices
  1. The model may disclose sensitive context, ignore policy, or invoke connected tools in an unsafe way.
  2. The model’s network cable may become physically shorter.
  3. Every certificate authority automatically becomes untrusted.
  4. The database schema is always deleted immediately.
Practice →
0298
Module 1 · Advanced Domain 1 · Background prompt injection against AI systems Unanswered

During a manufacturing and OT security review (MFG-OT-M01-298), which risk is most directly associated with "prompt injection against AI systems"?

View answer choices
  1. The model’s network cable may become physically shorter.
  2. The model may disclose sensitive context, ignore policy, or invoke connected tools in an unsafe way.
  3. The database schema is always deleted immediately.
  4. Every certificate authority automatically becomes untrusted.
Practice →
0299
Module 1 · Advanced Domain 1 · Background prompt injection against AI systems Unanswered

During a mobile-services penetration test (MOB-TEST-M01-299), which risk is most directly associated with "prompt injection against AI systems"?

View answer choices
  1. The model may disclose sensitive context, ignore policy, or invoke connected tools in an unsafe way.
  2. Every certificate authority automatically becomes untrusted.
  3. The database schema is always deleted immediately.
  4. The model’s network cable may become physically shorter.
Practice →
0300
Module 1 · Advanced Domain 1 · Background prompt injection against AI systems Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-300), which risk is most directly associated with "prompt injection against AI systems"?

View answer choices
  1. Every certificate authority automatically becomes untrusted.
  2. The database schema is always deleted immediately.
  3. The model’s network cable may become physically shorter.
  4. The model may disclose sensitive context, ignore policy, or invoke connected tools in an unsafe way.
Practice →