EC-CouncilCertified Ethical Hacker
Domain 1Objective 7
Information Assurance and Risk Management CEH Practice Questions (Page 7)
Part of the Information Security and Ethical Hacking Overview domain, which makes up ~17% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~16–27 in this domain), expect 2–3 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)
42questions here
9free pages
8concepts
Questions 31–35
- 31
A hospital's electronic health record (EHR) system must be available 24/7. The hospital has a disaster recovery plan that includes a backup site with a recovery time objective (RTO) of 2 hours and a recovery point objective (RPO) of 15 minutes. The hospital is considering moving to a cloud-based disaster recovery service that offers an RTO of 1 hour and an RPO of 5 minutes at a lower cost. However, the service uses asynchronous replication. What is the main risk of using asynchronous replication?
Select an answer first - 32
A US-based cloud service provider stores personal data of European Union citizens. To comply with GDPR, the provider must ensure that data transfers from the EU to the US have appropriate safeguards. Which of the following is the most direct compliance requirement?
Select an answer first - 33
A multinational corporation wants to adopt a risk management framework that provides principles and guidelines but does not prescribe a specific process. The company wants flexibility to adapt the framework to its existing processes. Which framework is most appropriate?
Select an answer first - 34
In the context of information assurance, which pillar is directly concerned with ensuring that a user cannot deny having performed an action?
Select an answer first - 35
A security analyst is calculating the annualized loss expectancy (ALE) for a server that is critical to operations. The server has a replacement value of $50,000, and the exposure factor (EF) is 0.5. The annualized rate of occurrence (ARO) is 0.2. What is the ALE?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.