A cloud storage service allows users to share files with others. The service needs to ensure that only users with a valid link can access shared files, and that the link cannot be used by unauthorized parties. Which control should the service implement?

Use a simple numeric code that is easy to remember

Allow anyone with the link to access the file without authentication

Encrypt the file with the recipient's public key

Generate a unique, unguessable token for each share link and require authentication to access the link

A stock trading platform must remain operational during peak market hours. The infrastructure team is considering adding a second data center in a different region. What is the primary security benefit of this approach?

It reduces the risk of unauthorized access by isolating users in different regions

It enhances confidentiality by encrypting data in transit between sites

It strengthens integrity by replicating data to multiple locations

It improves availability by providing redundancy in case of a regional outage

A security analyst is investigating a data breach and needs to determine which employee accessed a sensitive file and whether they modified it. What should the analyst rely on?

Detailed audit logs that record user identity, timestamp, and action

The file's last modified timestamp

A healthcare organization stores patient records in a database. To meet compliance requirements, they must ensure that any modification to a record can be traced to the specific staff member who made the change, and that the record cannot be altered without detection. Which combination of controls best achieves this?

Implement a digital signature for each record update and maintain a tamper-evident audit log

Back up the database nightly and store backups in a separate physical location

Encrypt the database with AES-256 and restrict access to the database administrator only

Use role-based access control to limit who can view records and require strong passwords

EC-CouncilCertified Ethical Hacker

Domain 1Objective 1

Elements of Information Security CEH Practice Questions (Page 1)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

10concepts

Questions 1–5

1application · easy
After a user successfully authenticates to a corporate network, the user is only allowed to access the HR portal if they are a member of the HR department. Which security concept is being applied?
Select an answer first
2expert · hard
A cloud storage service allows users to share files with others. The service needs to ensure that only users with a valid link can access shared files, and that the link cannot be used by unauthorized parties. Which control should the service implement?
Select an answer first
3application · medium
A stock trading platform must remain operational during peak market hours. The infrastructure team is considering adding a second data center in a different region. What is the primary security benefit of this approach?
Select an answer first
4application · medium
A security analyst is investigating a data breach and needs to determine which employee accessed a sensitive file and whether they modified it. What should the analyst rely on?
Select an answer first
5application · medium
A healthcare organization stores patient records in a database. To meet compliance requirements, they must ensure that any modification to a record can be traced to the specific staff member who made the change, and that the record cannot be altered without detection. Which combination of controls best achieves this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Elements of Information Security CEH Practice Questions (Page 1)

Questions 1–5

After a user successfully authenticates to a corporate network, the user is only allowed to access the HR portal if they are a member of the HR department. Which security concept is being applied?

A cloud storage service allows users to share files with others. The service needs to ensure that only users with a valid link can access shared files, and that the link cannot be used by unauthorized parties. Which control should the service implement?

A stock trading platform must remain operational during peak market hours. The infrastructure team is considering adding a second data center in a different region. What is the primary security benefit of this approach?

A security analyst is investigating a data breach and needs to determine which employee accessed a sensitive file and whether they modified it. What should the analyst rely on?

Keep studying — Information Security and Ethical Hacking Overview