A research organization stores sensitive intellectual property in a shared drive. They want to ensure that only the research team can access the files, but they also want to allow external collaborators to view specific documents without giving them full access. The organization is concerned about the usability of the solution for non-technical staff. Which approach best meets these requirements?

Use a single shared password for all collaborators

Implement a data loss prevention (DLP) solution that blocks unauthorized transfers

Set up a secure external sharing portal with per-document permissions and MFA

Encrypt the entire drive and give the key to all employees

A software vendor distributes updates to customers. The vendor wants to ensure that customers can verify the update came from the vendor and has not been tampered with. The vendor also wants to be able to prove which developer built the update. Which control should the vendor implement?

Publish the update on a secure HTTPS website

Encrypt the update with the vendor's public key

Use a checksum published on the vendor's website

Sign the update with the developer's private key and include a timestamp

A security administrator needs to determine which employee uploaded a confidential document to an external file-sharing service. The company has centralized logging enabled. What should the administrator use to identify the responsible individual?

Check the file's hash value against a known database

Inspect the network firewall logs for outbound connections

Use the user's digital signature to decrypt the file

Review the audit logs that record user activity with timestamps and source IP addresses

A company is implementing a new authentication system. They want to reduce the risk of credential theft but also want to minimize friction for users. They are considering using biometric authentication (fingerprint) on company-issued laptops. What is a potential security drawback of relying solely on biometrics?

Biometrics cannot be changed if compromised, unlike passwords

Biometrics do not require a password, so they are less secure

Biometrics are slower than passwords, reducing productivity

Biometrics are only usable on mobile devices

EC-CouncilCertified Ethical Hacker

Domain 1Objective 1

Elements of Information Security CEH Practice Questions (Page 10)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

10concepts

Questions 46–50

46expert · hard
A research organization stores sensitive intellectual property in a shared drive. They want to ensure that only the research team can access the files, but they also want to allow external collaborators to view specific documents without giving them full access. The organization is concerned about the usability of the solution for non-technical staff. Which approach best meets these requirements?
Select an answer first
47expert · hard
A software vendor distributes updates to customers. The vendor wants to ensure that customers can verify the update came from the vendor and has not been tampered with. The vendor also wants to be able to prove which developer built the update. Which control should the vendor implement?
Select an answer first
48application · medium
A security administrator needs to determine which employee uploaded a confidential document to an external file-sharing service. The company has centralized logging enabled. What should the administrator use to identify the responsible individual?
Select an answer first
49foundation · easy
Which technique is commonly used to detect unauthorized modification of data, thereby supporting integrity?
Select an answer first
50expert · hard
A company is implementing a new authentication system. They want to reduce the risk of credential theft but also want to minimize friction for users. They are considering using biometric authentication (fingerprint) on company-issued laptops. What is a potential security drawback of relying solely on biometrics?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Elements of Information Security CEH Practice Questions (Page 10)

Questions 46–50

A software vendor distributes updates to customers. The vendor wants to ensure that customers can verify the update came from the vendor and has not been tampered with. The vendor also wants to be able to prove which developer built the update. Which control should the vendor implement?

A security administrator needs to determine which employee uploaded a confidential document to an external file-sharing service. The company has centralized logging enabled. What should the administrator use to identify the responsible individual?

Which technique is commonly used to detect unauthorized modification of data, thereby supporting integrity?

Keep studying — Information Security and Ethical Hacking Overview