Advanced encryption standard is an algorithm used for which of the following?

What is the name of the international standard that establishes a baseline level of confidence in
the security functionality of IT products by providing a set of requirements for evaluation?

Which statement best describes a server type under an N-tier architecture?

During a penetration test, a tester finds that the web application being analyzed is vulnerable to
Cross Site Scripting (XSS). Which of the following conditions must be met to exploit this
vulnerability?

Which protocol and port number might be needed in order to send log messages to a log analysis
tool that resides behind a firewall?

A certified ethical hacker (CEH) is approached by a friend who believes her husband is cheating.
She offers to pay to break into her husband’s email account in order to find proof so she can take
him to court. What is the ethical response?

A hacker is attempting to see which ports have been left open on a network. Which NMAP switch
would the hacker use?

The network administrator for a company is setting up a website with e-commerce capabilities.
Packet sniffing is a concern because credit card information will be sent electronically over the
Internet. Customers visiting the site will need to encrypt the data with HTTPS. Which type of
certificate is used to encrypt and decrypt the data?

Which security control role does encryption meet?

A consultant is hired to do physical penetration testing at a large financial company. In the first day
of his assessment, the consultant goes to the company`s building dressed like an electrician and
waits in the lobby for an employee to pass through the main access gate, then the consultant
follows the employee behind to get into the restricted area. Which type of attack did the consultant
perform?