nerdexam
GAQM

CPEH-001 · Question #472

One of the Forbes 500 companies has been subjected to a large scale attack. You are one of the shortlisted pen testers that they may hire. During the interview with the CIO, he emphasized that he…

The correct answer is C. Explain to the CIO that you cannot eliminate all risk, but you will be able to reduce risk to. See the full explanation below for the reasoning.

Question

One of the Forbes 500 companies has been subjected to a large scale attack. You are one of the shortlisted pen testers that they may hire. During the interview with the CIO, he emphasized that he wants to totally eliminate all risks. What is one of the first things you should do when hired?

Options

  • AInterview all employees in the company to rule out possible insider threats.
  • BEstablish attribution to suspected attackers.
  • CExplain to the CIO that you cannot eliminate all risk, but you will be able to reduce risk to
  • DStart the Wireshark application to start sniffing network traffic.

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    12% (3)
  • C
    77% (20)
  • D
    8% (2)

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice