describes the specifics of the testing, the associated violations, and essentially protects both the bank’s interest
and your liabilities as a tester?

A big company, who wanted to test their security infrastructure, wants to hire elite pen testers like you. During
the interview, they asked you to show sample reports from previous penetration tests. What should you do?

Security and privacy of/on information systems are two entities that requires lawful regulations. Which of the
following regulations defines security and privacy controls for Federal information systems and organizations?

Which of the following tools would MOST LIKELY be used to perform security audit on various of forms of
network systems?

Knowing the nature of backup tapes, which of the following is the MOST RECOMMENDED way of storing
backup tapes?

What is the approximate cost of replacement and recovery operation per year of a hard drive that has a value
of $300 given that the technician who charges $10/hr would need 10 hours to restore OS and Software and
needs further 4 hours to restore the database from the last backup to the new hard disk? Calculate the SLE,
ARO, and ALE. Assume the EF = 1 (100%).

Which among the following is a Windows command that a hacker can use to list all the shares to which the
current user context has access?

Matthew received an email with an attachment named “YouWon$10Grand.zip.” The zip file contains a file
named “HowToClaimYourPrize.docx.exe.” Out of excitement and curiosity, Matthew opened the said file.
Without his knowledge, the file copies itself to Matthew’s APPDATA\\IocaI directory and begins to beacon to a
Command-and-control server to download additional malicious binaries. What type of malware has Matthew
encountered?

It is a short-range wireless communication technology that allows mobile phones, computers and other devices
to connect and communicate. This technology intends to replace cables connecting portable devices with high
regards to security.

Which of the following is the most important phase of ethical hacking wherein you need to spend considerable
amount of time?