CyberRevision
Continue revision → ← Subjects
CEH v13 · 20 official modules

All 5,000 CEH questions.

Search original practice content, filter by EC-Council module or exam domain, and open any question in revision mode.

0 answered overall

Showing 351–400 of 5,000 matching questions

50 per page
0351
Module 1 · Foundation Domain 1 · Background vulnerability Unanswered

During an authorized retail-company assessment (RET-LAB-M01-351), which evidence best supports an assessment of "vulnerability"?

View answer choices
  1. A reproducible finding with affected asset, evidence, and remediation.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A risk register linking assets to CIA impact ratings.
Practice →
0352
Module 1 · Foundation Domain 1 · Background vulnerability Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-352), which evidence best supports an assessment of "vulnerability"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A risk register linking assets to CIA impact ratings.
  4. A reproducible finding with affected asset, evidence, and remediation.
Practice →
0353
Module 1 · Foundation Domain 1 · Background vulnerability Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-353), which evidence best supports an assessment of "vulnerability"?

View answer choices
  1. A reproducible finding with affected asset, evidence, and remediation.
  2. A risk register linking assets to CIA impact ratings.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
0354
Module 1 · Applied Domain 1 · Background vulnerability Unanswered

During a financial-services purple-team test (FIN-PT-M01-354), which evidence best supports an assessment of "vulnerability"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A reproducible finding with affected asset, evidence, and remediation.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
0355
Module 1 · Applied Domain 1 · Background vulnerability Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-355), which evidence best supports an assessment of "vulnerability"?

View answer choices
  1. A reproducible finding with affected asset, evidence, and remediation.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A risk register linking assets to CIA impact ratings.
Practice →
0356
Module 1 · Applied Domain 1 · Background vulnerability Unanswered

During a government risk-validation project (GOV-RISK-M01-356), which evidence best supports an assessment of "vulnerability"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A reproducible finding with affected asset, evidence, and remediation.
Practice →
0357
Module 1 · Applied Domain 1 · Background vulnerability Unanswered

During an e-commerce application review (ECOM-WEB-M01-357), which evidence best supports an assessment of "vulnerability"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A risk register linking assets to CIA impact ratings.
  3. A reproducible finding with affected asset, evidence, and remediation.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
0358
Module 1 · Advanced Domain 1 · Background vulnerability Unanswered

During a manufacturing and OT security review (MFG-OT-M01-358), which evidence best supports an assessment of "vulnerability"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A reproducible finding with affected asset, evidence, and remediation.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
0359
Module 1 · Advanced Domain 1 · Background vulnerability Unanswered

During a mobile-services penetration test (MOB-TEST-M01-359), which evidence best supports an assessment of "vulnerability"?

View answer choices
  1. A reproducible finding with affected asset, evidence, and remediation.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A risk register linking assets to CIA impact ratings.
Practice →
0360
Module 1 · Advanced Domain 1 · Background vulnerability Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-360), which evidence best supports an assessment of "vulnerability"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A reproducible finding with affected asset, evidence, and remediation.
Practice →
0361
Module 1 · Foundation Domain 3 · Security defense in depth Unanswered

During an authorized retail-company assessment (RET-LAB-M01-361), which statement most accurately defines "defense in depth"?

View answer choices
  1. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  2. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  3. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  4. Governed identification, testing, deployment, and verification of software updates.
Practice →
0362
Module 1 · Foundation Domain 3 · Security defense in depth Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-362), which statement most accurately defines "defense in depth"?

View answer choices
  1. Governed identification, testing, deployment, and verification of software updates.
  2. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  3. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  4. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
Practice →
0363
Module 1 · Foundation Domain 3 · Security defense in depth Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-363), which statement most accurately defines "defense in depth"?

View answer choices
  1. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  2. Governed identification, testing, deployment, and verification of software updates.
  3. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  4. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
Practice →
0364
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During a financial-services purple-team test (FIN-PT-M01-364), which statement most accurately defines "defense in depth"?

View answer choices
  1. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  2. Governed identification, testing, deployment, and verification of software updates.
  3. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  4. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
Practice →
0365
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-365), which statement most accurately defines "defense in depth"?

View answer choices
  1. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  2. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  3. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  4. Governed identification, testing, deployment, and verification of software updates.
Practice →
0366
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During a government risk-validation project (GOV-RISK-M01-366), which statement most accurately defines "defense in depth"?

View answer choices
  1. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  2. Governed identification, testing, deployment, and verification of software updates.
  3. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  4. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
Practice →
0367
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During an e-commerce application review (ECOM-WEB-M01-367), which statement most accurately defines "defense in depth"?

View answer choices
  1. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  2. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  3. Governed identification, testing, deployment, and verification of software updates.
  4. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
Practice →
0368
Module 1 · Advanced Domain 3 · Security defense in depth Unanswered

During a manufacturing and OT security review (MFG-OT-M01-368), which statement most accurately defines "defense in depth"?

View answer choices
  1. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  2. Governed identification, testing, deployment, and verification of software updates.
  3. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  4. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
Practice →
0369
Module 1 · Advanced Domain 3 · Security defense in depth Unanswered

During a mobile-services penetration test (MOB-TEST-M01-369), which statement most accurately defines "defense in depth"?

View answer choices
  1. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  2. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  3. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
  4. Governed identification, testing, deployment, and verification of software updates.
Practice →
0370
Module 1 · Advanced Domain 3 · Security defense in depth Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-370), which statement most accurately defines "defense in depth"?

View answer choices
  1. Layering independent preventive, detective, and corrective controls so one failure is not decisive.
  2. Governed identification, testing, deployment, and verification of software updates.
  3. Identification and evaluation of threats, vulnerabilities, likelihood, and impact to support treatment decisions.
  4. Coordinated preparation, detection, analysis, containment, eradication, recovery, and improvement after incidents.
Practice →
0371
Module 1 · Foundation Domain 3 · Security defense in depth Unanswered

During an authorized retail-company assessment (RET-LAB-M01-371), which risk is most directly associated with "defense in depth"?

View answer choices
  1. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  2. Delayed or failed patches leave known vulnerabilities exploitable.
  3. Reliance on a single control creates a direct path when that control fails or is bypassed.
  4. Controls chosen without risk context may protect low-value assets while critical risks remain.
Practice →
0372
Module 1 · Foundation Domain 3 · Security defense in depth Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-372), which risk is most directly associated with "defense in depth"?

View answer choices
  1. Reliance on a single control creates a direct path when that control fails or is bypassed.
  2. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  3. Controls chosen without risk context may protect low-value assets while critical risks remain.
  4. Delayed or failed patches leave known vulnerabilities exploitable.
Practice →
0373
Module 1 · Foundation Domain 3 · Security defense in depth Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-373), which risk is most directly associated with "defense in depth"?

View answer choices
  1. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  2. Controls chosen without risk context may protect low-value assets while critical risks remain.
  3. Delayed or failed patches leave known vulnerabilities exploitable.
  4. Reliance on a single control creates a direct path when that control fails or is bypassed.
Practice →
0374
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During a financial-services purple-team test (FIN-PT-M01-374), which risk is most directly associated with "defense in depth"?

View answer choices
  1. Controls chosen without risk context may protect low-value assets while critical risks remain.
  2. Delayed or failed patches leave known vulnerabilities exploitable.
  3. Reliance on a single control creates a direct path when that control fails or is bypassed.
  4. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
Practice →
0375
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-375), which risk is most directly associated with "defense in depth"?

View answer choices
  1. Delayed or failed patches leave known vulnerabilities exploitable.
  2. Reliance on a single control creates a direct path when that control fails or is bypassed.
  3. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  4. Controls chosen without risk context may protect low-value assets while critical risks remain.
Practice →
0376
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During a government risk-validation project (GOV-RISK-M01-376), which risk is most directly associated with "defense in depth"?

View answer choices
  1. Controls chosen without risk context may protect low-value assets while critical risks remain.
  2. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  3. Reliance on a single control creates a direct path when that control fails or is bypassed.
  4. Delayed or failed patches leave known vulnerabilities exploitable.
Practice →
0377
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During an e-commerce application review (ECOM-WEB-M01-377), which risk is most directly associated with "defense in depth"?

View answer choices
  1. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  2. Controls chosen without risk context may protect low-value assets while critical risks remain.
  3. Delayed or failed patches leave known vulnerabilities exploitable.
  4. Reliance on a single control creates a direct path when that control fails or is bypassed.
Practice →
0378
Module 1 · Advanced Domain 3 · Security defense in depth Unanswered

During a manufacturing and OT security review (MFG-OT-M01-378), which risk is most directly associated with "defense in depth"?

View answer choices
  1. Reliance on a single control creates a direct path when that control fails or is bypassed.
  2. Delayed or failed patches leave known vulnerabilities exploitable.
  3. Controls chosen without risk context may protect low-value assets while critical risks remain.
  4. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
Practice →
0379
Module 1 · Advanced Domain 3 · Security defense in depth Unanswered

During a mobile-services penetration test (MOB-TEST-M01-379), which risk is most directly associated with "defense in depth"?

View answer choices
  1. Delayed or failed patches leave known vulnerabilities exploitable.
  2. Reliance on a single control creates a direct path when that control fails or is bypassed.
  3. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  4. Controls chosen without risk context may protect low-value assets while critical risks remain.
Practice →
0380
Module 1 · Advanced Domain 3 · Security defense in depth Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-380), which risk is most directly associated with "defense in depth"?

View answer choices
  1. Reliance on a single control creates a direct path when that control fails or is bypassed.
  2. Controls chosen without risk context may protect low-value assets while critical risks remain.
  3. Unplanned actions can destroy evidence, prolong compromise, or disrupt recovery.
  4. Delayed or failed patches leave known vulnerabilities exploitable.
Practice →
0381
Module 1 · Foundation Domain 3 · Security defense in depth Unanswered

During an authorized retail-company assessment (RET-LAB-M01-381), which action most directly controls the risk related to "defense in depth"?

View answer choices
  1. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  2. Prioritize actively exploited exposure and verify that remediation actually reached assets.
  3. Maintain a repeatable assessment process tied to asset value and risk ownership.
  4. Design overlapping controls across identity, endpoint, network, application, and data layers.
Practice →
0382
Module 1 · Foundation Domain 3 · Security defense in depth Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-382), which action most directly controls the risk related to "defense in depth"?

View answer choices
  1. Maintain a repeatable assessment process tied to asset value and risk ownership.
  2. Prioritize actively exploited exposure and verify that remediation actually reached assets.
  3. Design overlapping controls across identity, endpoint, network, application, and data layers.
  4. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
Practice →
0383
Module 1 · Foundation Domain 3 · Security defense in depth Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-383), which action most directly controls the risk related to "defense in depth"?

View answer choices
  1. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  2. Prioritize actively exploited exposure and verify that remediation actually reached assets.
  3. Design overlapping controls across identity, endpoint, network, application, and data layers.
  4. Maintain a repeatable assessment process tied to asset value and risk ownership.
Practice →
0384
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During a financial-services purple-team test (FIN-PT-M01-384), which action most directly controls the risk related to "defense in depth"?

View answer choices
  1. Design overlapping controls across identity, endpoint, network, application, and data layers.
  2. Maintain a repeatable assessment process tied to asset value and risk ownership.
  3. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  4. Prioritize actively exploited exposure and verify that remediation actually reached assets.
Practice →
0385
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-385), which action most directly controls the risk related to "defense in depth"?

View answer choices
  1. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  2. Prioritize actively exploited exposure and verify that remediation actually reached assets.
  3. Maintain a repeatable assessment process tied to asset value and risk ownership.
  4. Design overlapping controls across identity, endpoint, network, application, and data layers.
Practice →
0386
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During a government risk-validation project (GOV-RISK-M01-386), which action most directly controls the risk related to "defense in depth"?

View answer choices
  1. Design overlapping controls across identity, endpoint, network, application, and data layers.
  2. Prioritize actively exploited exposure and verify that remediation actually reached assets.
  3. Maintain a repeatable assessment process tied to asset value and risk ownership.
  4. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
Practice →
0387
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During an e-commerce application review (ECOM-WEB-M01-387), which action most directly controls the risk related to "defense in depth"?

View answer choices
  1. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  2. Design overlapping controls across identity, endpoint, network, application, and data layers.
  3. Prioritize actively exploited exposure and verify that remediation actually reached assets.
  4. Maintain a repeatable assessment process tied to asset value and risk ownership.
Practice →
0388
Module 1 · Advanced Domain 3 · Security defense in depth Unanswered

During a manufacturing and OT security review (MFG-OT-M01-388), which action most directly controls the risk related to "defense in depth"?

View answer choices
  1. Maintain a repeatable assessment process tied to asset value and risk ownership.
  2. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  3. Design overlapping controls across identity, endpoint, network, application, and data layers.
  4. Prioritize actively exploited exposure and verify that remediation actually reached assets.
Practice →
0389
Module 1 · Advanced Domain 3 · Security defense in depth Unanswered

During a mobile-services penetration test (MOB-TEST-M01-389), which action most directly controls the risk related to "defense in depth"?

View answer choices
  1. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  2. Prioritize actively exploited exposure and verify that remediation actually reached assets.
  3. Maintain a repeatable assessment process tied to asset value and risk ownership.
  4. Design overlapping controls across identity, endpoint, network, application, and data layers.
Practice →
0390
Module 1 · Advanced Domain 3 · Security defense in depth Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-390), which action most directly controls the risk related to "defense in depth"?

View answer choices
  1. Maintain tested playbooks, roles, communications, evidence handling, and exercises.
  2. Prioritize actively exploited exposure and verify that remediation actually reached assets.
  3. Design overlapping controls across identity, endpoint, network, application, and data layers.
  4. Maintain a repeatable assessment process tied to asset value and risk ownership.
Practice →
0391
Module 1 · Foundation Domain 3 · Security defense in depth Unanswered

During an authorized retail-company assessment (RET-LAB-M01-391), which evidence best supports an assessment of "defense in depth"?

View answer choices
  1. An architecture map showing which independent controls interrupt each attack path.
  2. Patch inventory correlated with vulnerability rescans and exception approvals.
  3. A risk register with likelihood, impact, owner, treatment, and review date.
  4. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
Practice →
0392
Module 1 · Foundation Domain 3 · Security defense in depth Unanswered

During a hospital incident-response exercise (HLT-SOC-M01-392), which evidence best supports an assessment of "defense in depth"?

View answer choices
  1. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  2. A risk register with likelihood, impact, owner, treatment, and review date.
  3. Patch inventory correlated with vulnerability rescans and exception approvals.
  4. An architecture map showing which independent controls interrupt each attack path.
Practice →
0393
Module 1 · Foundation Domain 3 · Security defense in depth Unanswered

During a university cyber-range engagement (EDU-RANGE-M01-393), which evidence best supports an assessment of "defense in depth"?

View answer choices
  1. A risk register with likelihood, impact, owner, treatment, and review date.
  2. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  3. An architecture map showing which independent controls interrupt each attack path.
  4. Patch inventory correlated with vulnerability rescans and exception approvals.
Practice →
0394
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During a financial-services purple-team test (FIN-PT-M01-394), which evidence best supports an assessment of "defense in depth"?

View answer choices
  1. Patch inventory correlated with vulnerability rescans and exception approvals.
  2. An architecture map showing which independent controls interrupt each attack path.
  3. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  4. A risk register with likelihood, impact, owner, treatment, and review date.
Practice →
0395
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During a cloud startup security audit (CLD-AUDIT-M01-395), which evidence best supports an assessment of "defense in depth"?

View answer choices
  1. A risk register with likelihood, impact, owner, treatment, and review date.
  2. Patch inventory correlated with vulnerability rescans and exception approvals.
  3. An architecture map showing which independent controls interrupt each attack path.
  4. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
Practice →
0396
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During a government risk-validation project (GOV-RISK-M01-396), which evidence best supports an assessment of "defense in depth"?

View answer choices
  1. A risk register with likelihood, impact, owner, treatment, and review date.
  2. Patch inventory correlated with vulnerability rescans and exception approvals.
  3. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  4. An architecture map showing which independent controls interrupt each attack path.
Practice →
0397
Module 1 · Applied Domain 3 · Security defense in depth Unanswered

During an e-commerce application review (ECOM-WEB-M01-397), which evidence best supports an assessment of "defense in depth"?

View answer choices
  1. A risk register with likelihood, impact, owner, treatment, and review date.
  2. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  3. An architecture map showing which independent controls interrupt each attack path.
  4. Patch inventory correlated with vulnerability rescans and exception approvals.
Practice →
0398
Module 1 · Advanced Domain 3 · Security defense in depth Unanswered

During a manufacturing and OT security review (MFG-OT-M01-398), which evidence best supports an assessment of "defense in depth"?

View answer choices
  1. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  2. Patch inventory correlated with vulnerability rescans and exception approvals.
  3. An architecture map showing which independent controls interrupt each attack path.
  4. A risk register with likelihood, impact, owner, treatment, and review date.
Practice →
0399
Module 1 · Advanced Domain 3 · Security defense in depth Unanswered

During a mobile-services penetration test (MOB-TEST-M01-399), which evidence best supports an assessment of "defense in depth"?

View answer choices
  1. An architecture map showing which independent controls interrupt each attack path.
  2. A risk register with likelihood, impact, owner, treatment, and review date.
  3. Patch inventory correlated with vulnerability rescans and exception approvals.
  4. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
Practice →
0400
Module 1 · Advanced Domain 3 · Security defense in depth Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M01-400), which evidence best supports an assessment of "defense in depth"?

View answer choices
  1. A risk register with likelihood, impact, owner, treatment, and review date.
  2. Patch inventory correlated with vulnerability rescans and exception approvals.
  3. A timeline linking alerts, decisions, evidence, containment, and recovery actions.
  4. An architecture map showing which independent controls interrupt each attack path.
Practice →