A company wants to protect its internal wiki from unauthorized access. They are considering requiring a hardware token for every login. The wiki is used daily by all employees, and the IT team is concerned about employees forgetting tokens. Which approach best balances security and usability?

Use only a username and password for wiki access

Allow users to bypass the token if they are on the corporate network

Implement single sign-on (SSO) with a hardware token required only for initial login

Require the hardware token for every login to the wiki

A multinational company is deploying a customer relationship management (CRM) system that stores personal data of customers in multiple countries. They must comply with data protection regulations that require data to be stored within certain geographic boundaries. What is the most important consideration?

Encrypt all data with a strong algorithm

Implement strong access controls for all users

Select cloud regions that meet the data residency requirements

Use a private cloud to ensure compliance

What is the primary purpose of authentication in an information system?

To verify the identity of a user or system

To trace actions to an individual

To determine what a user is allowed to do

A financial trading platform must ensure that its order-processing system remains accessible during peak trading hours. The system has experienced occasional hardware failures. The operations team wants to minimize downtime without significantly increasing latency. Which approach best balances availability and performance?

Implement a manual failover procedure that requires an administrator to switch to a standby server

Use a single high-end server with redundant power supplies and RAID

Increase the system's processing capacity by overprovisioning CPU and memory

Deploy the system on a cluster of servers with automatic failover and load balancing

A mobile app developer wants to collect user location data to provide personalized recommendations. The app must comply with privacy regulations, which require user consent and data minimization. The developer also wants to maintain a smooth user experience. Which approach best meets these requirements?

Ask for permission once at installation and collect location data indefinitely

Collect location data continuously in the background without asking for permission

Request permission to access location only when the feature is needed, and allow users to opt out

Anonymize the location data before storing it, but do not provide an opt-out

EC-CouncilCertified Ethical Hacker

Domain 1Objective 1

Elements of Information Security CEH Practice Questions (Page 11)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

10concepts

Questions 51–55

51application · medium
A company wants to protect its internal wiki from unauthorized access. They are considering requiring a hardware token for every login. The wiki is used daily by all employees, and the IT team is concerned about employees forgetting tokens. Which approach best balances security and usability?
Select an answer first
52expert · hard
A multinational company is deploying a customer relationship management (CRM) system that stores personal data of customers in multiple countries. They must comply with data protection regulations that require data to be stored within certain geographic boundaries. What is the most important consideration?
Select an answer first
53foundation · easy
What is the primary purpose of authentication in an information system?
Select an answer first
54application · medium
A financial trading platform must ensure that its order-processing system remains accessible during peak trading hours. The system has experienced occasional hardware failures. The operations team wants to minimize downtime without significantly increasing latency. Which approach best balances availability and performance?
Select an answer first
55expert · hard
A mobile app developer wants to collect user location data to provide personalized recommendations. The app must comply with privacy regulations, which require user consent and data minimization. The developer also wants to maintain a smooth user experience. Which approach best meets these requirements?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Elements of Information Security CEH Practice Questions (Page 11)

Questions 51–55

A company wants to protect its internal wiki from unauthorized access. They are considering requiring a hardware token for every login. The wiki is used daily by all employees, and the IT team is concerned about employees forgetting tokens. Which approach best balances security and usability?

What is the primary purpose of authentication in an information system?

Keep studying — Information Security and Ethical Hacking Overview