Exam 1: Ethical Hacking Overview

All states look at port scanning as noninvasive or nondestructive in nature and deem it legal.

The ____ certification uses the Open Source Security Testing Methodology Manual (OSSTMM), written by Peter Herzog, as its standardized methodology.

Describe some actions which security testers cannot perform legally.

In a(n) ____________________, an ethical hacker attempts to break into a company's network to find the weakest link in that network or one of its systems.

The collection of tools for conducting vulnerability assessments and attacks is sometimes referred to as a "____".

A ____ can be created that welcomes new users joining a chat session, even though a person isn't actually present to welcome them.

MATCHING Match each term with the correct statement below. a.script f.packet monkey b.red team g.hacker c.black box model h.gray box model d.packet monkey i.ethical hacker e.IRC "bot" -set of instructions that runs in sequence to perform tasks on a computer system

The ____ disseminates research documents on computer and network security worldwide at no cost.

Currently, the CEH exam is based on ____ domains (subject areas) with which the tester must be familiar.

"____" is not a domain tested for the CEH exam.