CyberRevision
Continue revision → ← Subjects
CEH v13 · 20 official modules

All 5,000 CEH questions.

Search original practice content, filter by EC-Council module or exam domain, and open any question in revision mode.

0 answered overall

Showing 4,501–4,550 of 5,000 matching questions

50 per page
4501
Module 19 · Foundation Domain 1 · Background cloud shared responsibility Unanswered

During an authorized retail-company assessment (RET-LAB-M19-4501), which action most directly controls the risk related to "cloud shared responsibility"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Document responsibilities for each service model and continuously validate customer-controlled settings.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
4502
Module 19 · Foundation Domain 1 · Background cloud shared responsibility Unanswered

During a hospital incident-response exercise (HLT-SOC-M19-4502), which action most directly controls the risk related to "cloud shared responsibility"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Document responsibilities for each service model and continuously validate customer-controlled settings.
Practice →
4503
Module 19 · Foundation Domain 1 · Background cloud shared responsibility Unanswered

During a university cyber-range engagement (EDU-RANGE-M19-4503), which action most directly controls the risk related to "cloud shared responsibility"?

View answer choices
  1. Document responsibilities for each service model and continuously validate customer-controlled settings.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
4504
Module 19 · Applied Domain 1 · Background cloud shared responsibility Unanswered

During a financial-services purple-team test (FIN-PT-M19-4504), which action most directly controls the risk related to "cloud shared responsibility"?

View answer choices
  1. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  2. Document responsibilities for each service model and continuously validate customer-controlled settings.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
4505
Module 19 · Applied Domain 1 · Background cloud shared responsibility Unanswered

During a cloud startup security audit (CLD-AUDIT-M19-4505), which action most directly controls the risk related to "cloud shared responsibility"?

View answer choices
  1. Document responsibilities for each service model and continuously validate customer-controlled settings.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
4506
Module 19 · Applied Domain 1 · Background cloud shared responsibility Unanswered

During a government risk-validation project (GOV-RISK-M19-4506), which action most directly controls the risk related to "cloud shared responsibility"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Document responsibilities for each service model and continuously validate customer-controlled settings.
Practice →
4507
Module 19 · Applied Domain 1 · Background cloud shared responsibility Unanswered

During an e-commerce application review (ECOM-WEB-M19-4507), which action most directly controls the risk related to "cloud shared responsibility"?

View answer choices
  1. Document responsibilities for each service model and continuously validate customer-controlled settings.
  2. Place preventive and detective controls across multiple stages of the chain.
  3. Map each asset and threat to confidentiality, integrity, and availability requirements.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
4508
Module 19 · Advanced Domain 1 · Background cloud shared responsibility Unanswered

During a manufacturing and OT security review (MFG-OT-M19-4508), which action most directly controls the risk related to "cloud shared responsibility"?

View answer choices
  1. Map each asset and threat to confidentiality, integrity, and availability requirements.
  2. Document responsibilities for each service model and continuously validate customer-controlled settings.
  3. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  4. Place preventive and detective controls across multiple stages of the chain.
Practice →
4509
Module 19 · Advanced Domain 1 · Background cloud shared responsibility Unanswered

During a mobile-services penetration test (MOB-TEST-M19-4509), which action most directly controls the risk related to "cloud shared responsibility"?

View answer choices
  1. Document responsibilities for each service model and continuously validate customer-controlled settings.
  2. Map controls and detections to relevant ATT&CK techniques and validate coverage.
  3. Place preventive and detective controls across multiple stages of the chain.
  4. Map each asset and threat to confidentiality, integrity, and availability requirements.
Practice →
4510
Module 19 · Advanced Domain 1 · Background cloud shared responsibility Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M19-4510), which action most directly controls the risk related to "cloud shared responsibility"?

View answer choices
  1. Place preventive and detective controls across multiple stages of the chain.
  2. Map each asset and threat to confidentiality, integrity, and availability requirements.
  3. Document responsibilities for each service model and continuously validate customer-controlled settings.
  4. Map controls and detections to relevant ATT&CK techniques and validate coverage.
Practice →
4511
Module 19 · Foundation Domain 1 · Background cloud shared responsibility Unanswered

During an authorized retail-company assessment (RET-LAB-M19-4511), which evidence best supports an assessment of "cloud shared responsibility"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A responsibility matrix mapped to the deployed cloud services.
Practice →
4512
Module 19 · Foundation Domain 1 · Background cloud shared responsibility Unanswered

During a hospital incident-response exercise (HLT-SOC-M19-4512), which evidence best supports an assessment of "cloud shared responsibility"?

View answer choices
  1. A responsibility matrix mapped to the deployed cloud services.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A risk register linking assets to CIA impact ratings.
Practice →
4513
Module 19 · Foundation Domain 1 · Background cloud shared responsibility Unanswered

During a university cyber-range engagement (EDU-RANGE-M19-4513), which evidence best supports an assessment of "cloud shared responsibility"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A responsibility matrix mapped to the deployed cloud services.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
4514
Module 19 · Applied Domain 1 · Background cloud shared responsibility Unanswered

During a financial-services purple-team test (FIN-PT-M19-4514), which evidence best supports an assessment of "cloud shared responsibility"?

View answer choices
  1. A responsibility matrix mapped to the deployed cloud services.
  2. A risk register linking assets to CIA impact ratings.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
4515
Module 19 · Applied Domain 1 · Background cloud shared responsibility Unanswered

During a cloud startup security audit (CLD-AUDIT-M19-4515), which evidence best supports an assessment of "cloud shared responsibility"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A responsibility matrix mapped to the deployed cloud services.
Practice →
4516
Module 19 · Applied Domain 1 · Background cloud shared responsibility Unanswered

During a government risk-validation project (GOV-RISK-M19-4516), which evidence best supports an assessment of "cloud shared responsibility"?

View answer choices
  1. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. A responsibility matrix mapped to the deployed cloud services.
  4. A risk register linking assets to CIA impact ratings.
Practice →
4517
Module 19 · Applied Domain 1 · Background cloud shared responsibility Unanswered

During an e-commerce application review (ECOM-WEB-M19-4517), which evidence best supports an assessment of "cloud shared responsibility"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A responsibility matrix mapped to the deployed cloud services.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
Practice →
4518
Module 19 · Advanced Domain 1 · Background cloud shared responsibility Unanswered

During a manufacturing and OT security review (MFG-OT-M19-4518), which evidence best supports an assessment of "cloud shared responsibility"?

View answer choices
  1. A responsibility matrix mapped to the deployed cloud services.
  2. A risk register linking assets to CIA impact ratings.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A detection matrix showing covered and uncovered ATT&CK techniques.
Practice →
4519
Module 19 · Advanced Domain 1 · Background cloud shared responsibility Unanswered

During a mobile-services penetration test (MOB-TEST-M19-4519), which evidence best supports an assessment of "cloud shared responsibility"?

View answer choices
  1. A risk register linking assets to CIA impact ratings.
  2. A detection matrix showing covered and uncovered ATT&CK techniques.
  3. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  4. A responsibility matrix mapped to the deployed cloud services.
Practice →
4520
Module 19 · Advanced Domain 1 · Background cloud shared responsibility Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M19-4520), which evidence best supports an assessment of "cloud shared responsibility"?

View answer choices
  1. A responsibility matrix mapped to the deployed cloud services.
  2. Telemetry mapped to reconnaissance, delivery, exploitation, installation, command and control, and objectives.
  3. A detection matrix showing covered and uncovered ATT&CK techniques.
  4. A risk register linking assets to CIA impact ratings.
Practice →
4521
Module 19 · Foundation Domain 1 · Background training-data poisoning Unanswered

During an authorized retail-company assessment (RET-LAB-M19-4521), which statement most accurately defines "training-data poisoning"?

View answer choices
  1. Legitimate encryption of a clean dataset.
  2. Routine certificate renewal.
  3. Intentional corruption of model training or feedback data to influence learned behavior.
  4. Normal load balancing across inference servers.
Practice →
4522
Module 19 · Foundation Domain 1 · Background training-data poisoning Unanswered

During a hospital incident-response exercise (HLT-SOC-M19-4522), which statement most accurately defines "training-data poisoning"?

View answer choices
  1. Intentional corruption of model training or feedback data to influence learned behavior.
  2. Normal load balancing across inference servers.
  3. Legitimate encryption of a clean dataset.
  4. Routine certificate renewal.
Practice →
4523
Module 19 · Foundation Domain 1 · Background training-data poisoning Unanswered

During a university cyber-range engagement (EDU-RANGE-M19-4523), which statement most accurately defines "training-data poisoning"?

View answer choices
  1. Normal load balancing across inference servers.
  2. Routine certificate renewal.
  3. Legitimate encryption of a clean dataset.
  4. Intentional corruption of model training or feedback data to influence learned behavior.
Practice →
4524
Module 19 · Applied Domain 1 · Background training-data poisoning Unanswered

During a financial-services purple-team test (FIN-PT-M19-4524), which statement most accurately defines "training-data poisoning"?

View answer choices
  1. Intentional corruption of model training or feedback data to influence learned behavior.
  2. Routine certificate renewal.
  3. Normal load balancing across inference servers.
  4. Legitimate encryption of a clean dataset.
Practice →
4525
Module 19 · Applied Domain 1 · Background training-data poisoning Unanswered

During a cloud startup security audit (CLD-AUDIT-M19-4525), which statement most accurately defines "training-data poisoning"?

View answer choices
  1. Legitimate encryption of a clean dataset.
  2. Routine certificate renewal.
  3. Intentional corruption of model training or feedback data to influence learned behavior.
  4. Normal load balancing across inference servers.
Practice →
4526
Module 19 · Applied Domain 1 · Background training-data poisoning Unanswered

During a government risk-validation project (GOV-RISK-M19-4526), which statement most accurately defines "training-data poisoning"?

View answer choices
  1. Normal load balancing across inference servers.
  2. Legitimate encryption of a clean dataset.
  3. Intentional corruption of model training or feedback data to influence learned behavior.
  4. Routine certificate renewal.
Practice →
4527
Module 19 · Applied Domain 1 · Background training-data poisoning Unanswered

During an e-commerce application review (ECOM-WEB-M19-4527), which statement most accurately defines "training-data poisoning"?

View answer choices
  1. Legitimate encryption of a clean dataset.
  2. Normal load balancing across inference servers.
  3. Routine certificate renewal.
  4. Intentional corruption of model training or feedback data to influence learned behavior.
Practice →
4528
Module 19 · Advanced Domain 1 · Background training-data poisoning Unanswered

During a manufacturing and OT security review (MFG-OT-M19-4528), which statement most accurately defines "training-data poisoning"?

View answer choices
  1. Intentional corruption of model training or feedback data to influence learned behavior.
  2. Normal load balancing across inference servers.
  3. Routine certificate renewal.
  4. Legitimate encryption of a clean dataset.
Practice →
4529
Module 19 · Advanced Domain 1 · Background training-data poisoning Unanswered

During a mobile-services penetration test (MOB-TEST-M19-4529), which statement most accurately defines "training-data poisoning"?

View answer choices
  1. Routine certificate renewal.
  2. Intentional corruption of model training or feedback data to influence learned behavior.
  3. Legitimate encryption of a clean dataset.
  4. Normal load balancing across inference servers.
Practice →
4530
Module 19 · Advanced Domain 1 · Background training-data poisoning Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M19-4530), which statement most accurately defines "training-data poisoning"?

View answer choices
  1. Legitimate encryption of a clean dataset.
  2. Routine certificate renewal.
  3. Normal load balancing across inference servers.
  4. Intentional corruption of model training or feedback data to influence learned behavior.
Practice →
4531
Module 19 · Foundation Domain 1 · Background training-data poisoning Unanswered

During an authorized retail-company assessment (RET-LAB-M19-4531), which risk is most directly associated with "training-data poisoning"?

View answer choices
  1. All network latency is eliminated.
  2. The model automatically gains perfect accuracy.
  3. Poisoned examples can introduce hidden behavior, bias, or attacker-chosen failure modes into a model.
  4. Every input becomes digitally signed.
Practice →
4532
Module 19 · Foundation Domain 1 · Background training-data poisoning Unanswered

During a hospital incident-response exercise (HLT-SOC-M19-4532), which risk is most directly associated with "training-data poisoning"?

View answer choices
  1. Every input becomes digitally signed.
  2. Poisoned examples can introduce hidden behavior, bias, or attacker-chosen failure modes into a model.
  3. The model automatically gains perfect accuracy.
  4. All network latency is eliminated.
Practice →
4533
Module 19 · Foundation Domain 1 · Background training-data poisoning Unanswered

During a university cyber-range engagement (EDU-RANGE-M19-4533), which risk is most directly associated with "training-data poisoning"?

View answer choices
  1. Poisoned examples can introduce hidden behavior, bias, or attacker-chosen failure modes into a model.
  2. All network latency is eliminated.
  3. Every input becomes digitally signed.
  4. The model automatically gains perfect accuracy.
Practice →
4534
Module 19 · Applied Domain 1 · Background training-data poisoning Unanswered

During a financial-services purple-team test (FIN-PT-M19-4534), which risk is most directly associated with "training-data poisoning"?

View answer choices
  1. The model automatically gains perfect accuracy.
  2. Every input becomes digitally signed.
  3. All network latency is eliminated.
  4. Poisoned examples can introduce hidden behavior, bias, or attacker-chosen failure modes into a model.
Practice →
4535
Module 19 · Applied Domain 1 · Background training-data poisoning Unanswered

During a cloud startup security audit (CLD-AUDIT-M19-4535), which risk is most directly associated with "training-data poisoning"?

View answer choices
  1. Poisoned examples can introduce hidden behavior, bias, or attacker-chosen failure modes into a model.
  2. The model automatically gains perfect accuracy.
  3. All network latency is eliminated.
  4. Every input becomes digitally signed.
Practice →
4536
Module 19 · Applied Domain 1 · Background training-data poisoning Unanswered

During a government risk-validation project (GOV-RISK-M19-4536), which risk is most directly associated with "training-data poisoning"?

View answer choices
  1. The model automatically gains perfect accuracy.
  2. Poisoned examples can introduce hidden behavior, bias, or attacker-chosen failure modes into a model.
  3. Every input becomes digitally signed.
  4. All network latency is eliminated.
Practice →
4537
Module 19 · Applied Domain 1 · Background training-data poisoning Unanswered

During an e-commerce application review (ECOM-WEB-M19-4537), which risk is most directly associated with "training-data poisoning"?

View answer choices
  1. Poisoned examples can introduce hidden behavior, bias, or attacker-chosen failure modes into a model.
  2. All network latency is eliminated.
  3. Every input becomes digitally signed.
  4. The model automatically gains perfect accuracy.
Practice →
4538
Module 19 · Advanced Domain 1 · Background training-data poisoning Unanswered

During a manufacturing and OT security review (MFG-OT-M19-4538), which risk is most directly associated with "training-data poisoning"?

View answer choices
  1. All network latency is eliminated.
  2. Every input becomes digitally signed.
  3. The model automatically gains perfect accuracy.
  4. Poisoned examples can introduce hidden behavior, bias, or attacker-chosen failure modes into a model.
Practice →
4539
Module 19 · Advanced Domain 1 · Background training-data poisoning Unanswered

During a mobile-services penetration test (MOB-TEST-M19-4539), which risk is most directly associated with "training-data poisoning"?

View answer choices
  1. All network latency is eliminated.
  2. The model automatically gains perfect accuracy.
  3. Poisoned examples can introduce hidden behavior, bias, or attacker-chosen failure modes into a model.
  4. Every input becomes digitally signed.
Practice →
4540
Module 19 · Advanced Domain 1 · Background training-data poisoning Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M19-4540), which risk is most directly associated with "training-data poisoning"?

View answer choices
  1. Poisoned examples can introduce hidden behavior, bias, or attacker-chosen failure modes into a model.
  2. Every input becomes digitally signed.
  3. All network latency is eliminated.
  4. The model automatically gains perfect accuracy.
Practice →
4541
Module 19 · Foundation Domain 1 · Background training-data poisoning Unanswered

During an authorized retail-company assessment (RET-LAB-M19-4541), which action most directly controls the risk related to "training-data poisoning"?

View answer choices
  1. Use one unverified source for every training example.
  2. Enforce data provenance, access control, validation, anomaly detection, versioning, and trusted evaluation sets.
  3. Accept anonymous training contributions without review.
  4. Remove all dataset hashes and lineage records.
Practice →
4542
Module 19 · Foundation Domain 1 · Background training-data poisoning Unanswered

During a hospital incident-response exercise (HLT-SOC-M19-4542), which action most directly controls the risk related to "training-data poisoning"?

View answer choices
  1. Enforce data provenance, access control, validation, anomaly detection, versioning, and trusted evaluation sets.
  2. Remove all dataset hashes and lineage records.
  3. Accept anonymous training contributions without review.
  4. Use one unverified source for every training example.
Practice →
4543
Module 19 · Foundation Domain 1 · Background training-data poisoning Unanswered

During a university cyber-range engagement (EDU-RANGE-M19-4543), which action most directly controls the risk related to "training-data poisoning"?

View answer choices
  1. Accept anonymous training contributions without review.
  2. Remove all dataset hashes and lineage records.
  3. Use one unverified source for every training example.
  4. Enforce data provenance, access control, validation, anomaly detection, versioning, and trusted evaluation sets.
Practice →
4544
Module 19 · Applied Domain 1 · Background training-data poisoning Unanswered

During a financial-services purple-team test (FIN-PT-M19-4544), which action most directly controls the risk related to "training-data poisoning"?

View answer choices
  1. Remove all dataset hashes and lineage records.
  2. Use one unverified source for every training example.
  3. Enforce data provenance, access control, validation, anomaly detection, versioning, and trusted evaluation sets.
  4. Accept anonymous training contributions without review.
Practice →
4545
Module 19 · Applied Domain 1 · Background training-data poisoning Unanswered

During a cloud startup security audit (CLD-AUDIT-M19-4545), which action most directly controls the risk related to "training-data poisoning"?

View answer choices
  1. Accept anonymous training contributions without review.
  2. Enforce data provenance, access control, validation, anomaly detection, versioning, and trusted evaluation sets.
  3. Use one unverified source for every training example.
  4. Remove all dataset hashes and lineage records.
Practice →
4546
Module 19 · Applied Domain 1 · Background training-data poisoning Unanswered

During a government risk-validation project (GOV-RISK-M19-4546), which action most directly controls the risk related to "training-data poisoning"?

View answer choices
  1. Enforce data provenance, access control, validation, anomaly detection, versioning, and trusted evaluation sets.
  2. Remove all dataset hashes and lineage records.
  3. Accept anonymous training contributions without review.
  4. Use one unverified source for every training example.
Practice →
4547
Module 19 · Applied Domain 1 · Background training-data poisoning Unanswered

During an e-commerce application review (ECOM-WEB-M19-4547), which action most directly controls the risk related to "training-data poisoning"?

View answer choices
  1. Accept anonymous training contributions without review.
  2. Use one unverified source for every training example.
  3. Remove all dataset hashes and lineage records.
  4. Enforce data provenance, access control, validation, anomaly detection, versioning, and trusted evaluation sets.
Practice →
4548
Module 19 · Advanced Domain 1 · Background training-data poisoning Unanswered

During a manufacturing and OT security review (MFG-OT-M19-4548), which action most directly controls the risk related to "training-data poisoning"?

View answer choices
  1. Enforce data provenance, access control, validation, anomaly detection, versioning, and trusted evaluation sets.
  2. Use one unverified source for every training example.
  3. Remove all dataset hashes and lineage records.
  4. Accept anonymous training contributions without review.
Practice →
4549
Module 19 · Advanced Domain 1 · Background training-data poisoning Unanswered

During a mobile-services penetration test (MOB-TEST-M19-4549), which action most directly controls the risk related to "training-data poisoning"?

View answer choices
  1. Use one unverified source for every training example.
  2. Enforce data provenance, access control, validation, anomaly detection, versioning, and trusted evaluation sets.
  3. Accept anonymous training contributions without review.
  4. Remove all dataset hashes and lineage records.
Practice →
4550
Module 19 · Advanced Domain 1 · Background training-data poisoning Unanswered

During a global-enterprise mock CEH scenario (ENT-MOCK-M19-4550), which action most directly controls the risk related to "training-data poisoning"?

View answer choices
  1. Accept anonymous training contributions without review.
  2. Remove all dataset hashes and lineage records.
  3. Use one unverified source for every training example.
  4. Enforce data provenance, access control, validation, anomaly detection, versioning, and trusted evaluation sets.
Practice →