A system administrator is configuring a new file server. They want to ensure that users can only access files they are explicitly granted permission to, and that permissions are based on their job role. Which access control model should they implement?

Role-based access control (RBAC)

Attribute-based access control (ABAC)

Discretionary access control (DAC)

Which of the following is an example of a knowledge-based authentication factor?

A one-time passcode sent to a mobile device

A social media company collects user data for personalization. They want to comply with privacy regulations while still providing a good user experience. Which approach best balances privacy and usability?

Store user data in an encrypted database and never share it with third parties

Collect as much data as possible to improve personalization, with a complex consent form

Collect only the minimum personal data necessary and allow users to control their privacy settings

Anonymize all user data and disable all personalization features

A company wants to strengthen access to its cloud-based project management tool. Currently, employees log in with just a username and password. The company is concerned about phishing attacks and wants to add a second authentication factor without requiring employees to carry additional hardware. Which option best meets these requirements?

Require employees to answer personal security questions after entering their password

Implement a mobile authenticator app that generates time-based one-time passwords

Send a one-time passcode via SMS to the employee's phone

Ask employees to change their passwords every 30 days

A legal firm needs to prove that a partner approved a contract and that the contract was not altered after approval. They are considering using digital signatures and audit logs. Which statement correctly describes the relationship between these controls?

Audit logs provide non-repudiation, while digital signatures provide accountability

Both controls are equally effective for non-repudiation

Digital signatures are only useful for confidentiality, not integrity

Digital signatures provide non-repudiation and integrity, while audit logs provide accountability

EC-CouncilCertified Ethical Hacker

Domain 1Objective 1

Elements of Information Security CEH Practice Questions (Page 2)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 57 practice questions to prepare you well beyond it. (estimate)

57questions here

12free pages

10concepts

Questions 6–10

6expert · hard
A system administrator is configuring a new file server. They want to ensure that users can only access files they are explicitly granted permission to, and that permissions are based on their job role. Which access control model should they implement?
Select an answer first
7foundation · easy
Which of the following is an example of a knowledge-based authentication factor?
Select an answer first
8application · medium
A social media company collects user data for personalization. They want to comply with privacy regulations while still providing a good user experience. Which approach best balances privacy and usability?
Select an answer first
9application · medium
A company wants to strengthen access to its cloud-based project management tool. Currently, employees log in with just a username and password. The company is concerned about phishing attacks and wants to add a second authentication factor without requiring employees to carry additional hardware. Which option best meets these requirements?
Select an answer first
10expert · hard
A legal firm needs to prove that a partner approved a contract and that the contract was not altered after approval. They are considering using digital signatures and audit logs. Which statement correctly describes the relationship between these controls?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.