A penetration tester is hired to assess a multinational company's systems. The company operates in multiple countries, and the tester's activities may affect systems in different jurisdictions. The tester has signed a contract that includes a clause stating that the tester will comply with all applicable laws. What is the most important consideration for the tester?

Rely on the contract's compliance clause to protect against legal issues.

Limit testing to systems located in the company's home country.

Ensure that the testing activities are legal in all jurisdictions where systems are located.

Ignore local laws because the contract is governed by the company's home country laws.

A penetration tester is conducting an assessment of a company's internal network. The tester discovers that the company's backup server is accessible without authentication. The tester also notices that the backup server contains sensitive data. What should the tester do?

Report the vulnerability without accessing the data.

Ignore the backup server because it is not part of the assessment scope.

Access the backup server and download a sample of the data to prove the risk.

Change the backup server's configuration to require authentication.

A penetration tester is hired to assess a healthcare organization's patient portal. The rules of engagement state that testing is limited to business hours and must not cause any service disruption. During the test, the tester finds a vulnerability that, if exploited, could crash the portal. What should the tester do?

Exploit the vulnerability during business hours to prove the impact, then report it.

Exploit the vulnerability after business hours to avoid disrupting operations.

Report the vulnerability without exploiting it, explaining the potential impact.

Ask the client to extend the testing window so the vulnerability can be exploited safely.

Which of the following is a critical legal requirement for conducting ethical hacking activities?

Having a certification such as CEH

Obtaining written authorization from the organization that owns the systems being tested

Using only tools that are approved by the government

Performing the testing only during business hours

A penetration tester is hired by a company to test its internal network. The contract includes a detailed scope and rules of engagement. During the test, the tester discovers that the company's firewall also protects a partner organization's network segment. What should the tester do?

Test the partner's segment as well, since it is behind the same firewall.

Ignore the partner's segment and continue testing the company's network as planned.

Stop testing the partner's segment and inform the company of the situation, requesting clarification or expanded authorization.

Test the partner's segment only for vulnerabilities, but do not exploit them.

EC-CouncilCertified Ethical Hacker

Domain 1Objective 4

Ethical Hacking Concepts and Scope CEH Practice Questions (Page 6)

Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

5concepts

Questions 26–30

26expert · hard
A penetration tester is hired to assess a multinational company's systems. The company operates in multiple countries, and the tester's activities may affect systems in different jurisdictions. The tester has signed a contract that includes a clause stating that the tester will comply with all applicable laws. What is the most important consideration for the tester?
Select an answer first
27application · medium
A penetration tester is conducting an assessment of a company's internal network. The tester discovers that the company's backup server is accessible without authentication. The tester also notices that the backup server contains sensitive data. What should the tester do?
Select an answer first
28application · medium
A penetration tester is hired to assess a healthcare organization's patient portal. The rules of engagement state that testing is limited to business hours and must not cause any service disruption. During the test, the tester finds a vulnerability that, if exploited, could crash the portal. What should the tester do?
Select an answer first
29foundation · easy
Which of the following is a critical legal requirement for conducting ethical hacking activities?
Select an answer first
30application · medium
A penetration tester is hired by a company to test its internal network. The contract includes a detailed scope and rules of engagement. During the test, the tester discovers that the company's firewall also protects a partner organization's network segment. What should the tester do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Ethical Hacking Concepts and Scope CEH Practice Questions (Page 6)

Questions 26–30

A penetration tester is conducting an assessment of a company's internal network. The tester discovers that the company's backup server is accessible without authentication. The tester also notices that the backup server contains sensitive data. What should the tester do?

Which of the following is a critical legal requirement for conducting ethical hacking activities?

A penetration tester is hired by a company to test its internal network. The contract includes a detailed scope and rules of engagement. During the test, the tester discovers that the company's firewall also protects a partner organization's network segment. What should the tester do?

Keep studying — Information Security and Ethical Hacking Overview