Certified Ethical Hacker (CEH v10) Free Sample Questions

Tailgating is the practice of following an authorized person through a secured entrance without proper authorization. This occurs when an unauthorized individual gains physical access by closely following an employee through security doors or checkpoints. Reverse Social Engineering involves manipulating someone to contact the attacker, Piggybacking typically involves the authorized person being aware and allowing access, and "Announced" is not a recognized security breach type. Tailgating is a common physical security threat that organizations must address through security awareness training and access controls.

Keeping offline backup generations is the most effective countermeasure against ransomware because the backups are not connected to the network and cannot be encrypted by ransomware. This allows organizations to restore data without paying the ransom, as the offline backups remain unaffected by the attack.

The double dash (--) at the end of the SQL query indicates an End of Line Comment attack. This technique comments out the rest of the original query, allowing the attacker to bypass authentication or other security checks by making the database ignore the remaining conditions in the WHERE clause.

Full disk encryption is the best protection for confidential documents on a laptop that might be stolen. It encrypts the entire hard drive, making all data unreadable without the encryption key, even if the physical device is compromised. BIOS passwords and hidden folders can be easily bypassed by attackers with physical access.

The hosts file contains hostname-to-IP address mappings that override DNS lookups. By modifying this file, an attacker can redirect traffic from legitimate sites like "www.MyPersonalBank.com" to malicious phishing sites by mapping the legitimate domain to a malicious IP address.

Anomaly-based IDS systems can identify unknown attacks by establishing a baseline of normal network behavior and flagging deviations from this baseline. Unlike signature-based IDS that only detect known attack patterns, anomaly-based systems can detect zero-day attacks and novel attack techniques that have not been previously catalogued.

The command "compmgmt.msc" launches the Computer Management Console in Windows. The .msc extension indicates a Microsoft Management Console snap-in, and compmgmt is the specific snap-in for computer management functions including disk management, services, and system tools.

HIPAA (Health Insurance Portability and Accountability Act) requires the use of standard national employer identification numbers for healthcare transactions. This standardization helps ensure proper identification of healthcare entities in electronic transactions and maintains consistency across the healthcare industry.

Wireshark displays packet data in the packet bytes pane in hexadecimal format, with corresponding ASCII representation on the right. This hex format allows security professionals to analyze raw packet contents at the byte level, which is essential for protocol analysis and network forensics.

DNSSEC (DNS Security Extensions) provides cryptographic authentication for DNS data, ensuring the integrity and authenticity of DNS responses. It uses digital signatures to verify that DNS responses have not been tampered with, effectively preventing DNS spoofing, cache poisoning, and man-in-the-middle attacks on DNS queries.