Exam 1: Ethical Hacking Overview

____ takes penetration testing to a higher level.

In the ____ model, management does not divulge to staff that penetration testing is being conducted, nor does it give the tester any diagrams or describe what technologies the company is using.

In the ____________________ model, the tester is told what network topology and technology the company is using and is given permission to interview IT personnel and company employees.

Penetration testers and security testers usually have a laptop computer configured with ____ and hacking tools.

Some of the most infamous cases are hacks carried out by ____ students, such as the eBay hack of 1999.

Employees of a security company are protected under the company's ____________________ with the client.

As a security tester, you can't make a network impenetrable.

Ethical hackers are employed or contracted by a company to do what illegal hackers do: break in. Why?

The International Council of Electronic Commerce Consultants (EC-Council) has developed a certification designation called ____.

The ____ certification is designated by the Institute for Security and Open Methodologies (ISECOM), a nonprofit organization that provides security training and certification programs for security professionals.

Those who break into systems to steal or destroy data are often referred to as ____________________.

MATCHING Match each term with the correct statement below. a.script f.packet monkey b.red team g.hacker c.black box model h.gray box model d.packet monkey i.ethical hacker e.IRC "bot" -accesses a computer system or network without the authorization of the system's owner

MATCHING Match each term with the correct statement below. a.script f.packet monkey b.red team g.hacker c.black box model h.gray box model d.packet monkey i.ethical hacker e.IRC "bot" -Derogatory term referring to people who copy code from knowledgeable programmers instead of creating the code themselves.

An ethical hacker is a person who performs most of the same activities a cracker does, but with the owner or company's permission.

If being liked by others is important to you, you might want to consider a different profession than penetration testing. Why?

The SysAdmin,Audit,Network, Security (SANS) Institute offers training and IT security certifications through ____.

MATCHING Match each term with the correct statement below. a.script f.packet monkey b.red team g.hacker c.black box model h.gray box model d.packet monkey i.ethical hacker e.IRC "bot" -puts the burden on the tester to find out what technologies the company is using

Why are employees sometimes not told that the company is being monitored?

Why is it hard for an ethical hacker to avoid breaking any laws?

The U.S. Department of Justice labels all illegal access to computer or network systems as "____".