Elements of Information Security CEH Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A bank needs to prove that a customer authorized a wire transfer and that the customer cannot later deny having initiated it. The bank also wants to ensure that the transfer instruction was not modified after approval. Which control should the bank implement?

   • ARecord the customer's voice confirmation and store it in a secure database
   • BLog the transfer in the bank's audit system with the customer's IP address
   • CSend the transfer instruction over an encrypted VPN connection
   • DRequire the customer to sign the transfer instruction with a digital signature
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following measures directly supports the availability of a system?

   • AEnforcing strict access control lists
   • BImplementing redundant power supplies
   • CUsing strong encryption for data at rest
   • DApplying digital signatures to software updates
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which approach best illustrates balancing security with usability?

   • ARequiring a 50-character password for every login
   • BImplementing single sign-on (SSO) to reduce password fatigue while maintaining security
   • CUsing the same password for all systems
   • DDisabling all security controls to maximize performance
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A government agency publishes official documents online. Citizens need to verify that a document has not been altered since publication and that it was issued by the agency. The agency also wants to be able to prove which official approved the final version. Which combination of controls should the agency use?

   • APublish a SHA-256 hash of each document on the agency's website
   • BDigitally sign each document with the agency's private key and include the signer's identity in the signature
   • CEncrypt each document with the agency's public key
   • DStore documents in a read-only database with an audit log
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A company is implementing multi-factor authentication (MFA) for remote access. They are concerned that employees will find it burdensome and may circumvent it. They want to maintain strong security while minimizing friction. Which approach best balances these concerns?

   • ARequire MFA only for administrative accounts
   • BRequire MFA for every login, but allow users to use a physical token
   • CUse adaptive MFA that prompts for a second factor only when risk is high
   • DUse only a password for remote access to reduce friction
   Reveal Solution Discussion Select an answer first