IT Exam Items Repository

Last Updated: Jun 24, 2026
IT Exam Items Repository › Category: Ethical Hacker
A company hires a cybersecurity consultant to perform penetration tests. The consultant is working with the company to set up communication procedures. Which two protocols should be considered for exchanging emails securely? (Choose two.)
ITExamAnswers Editorial Team asked 3 years ago • 
A company hires a cybersecurity consultant to perform penetration tests. What should be the consultant's first step in validating the engagement scope?
ITExamAnswers Editorial Team asked 3 years ago • 
A company hires a cybersecurity consultant to perform penetration tests. What can cause scope creep of the engagement?
ITExamAnswers Editorial Team asked 3 years ago • 
A company hires a cybersecurity consultant to assess vulnerability on crucial web application devices such as web and database servers. Which document should the company provide to help the consultant document and define what systems are in the testing?
ITExamAnswers Editorial Team asked 3 years ago • 
A company hires a cybersecurity consultant to assess applications using different APIs. Which document should the company provide to the consultant about a query language for APIs and a language for executing queries at runtime?
ITExamAnswers Editorial Team asked 3 years ago • 
A company hires a cybersecurity consultant to assess applications using different APIs. Which document should the company provide to the consultant about an XML-based language used to document a web service's functionality?
ITExamAnswers Editorial Team asked 3 years ago • 
A company hires a cybersecurity consultant to perform penetration tests and review the rules of engagement documents. The consultant notices that one element specifies that the tests should be performed toward only web applications on websites www1.company.com and www2.company.com, with no social engineering attacks and no cross-site scripting attacks. Which element in the document is used for the specification?
ITExamAnswers Editorial Team asked 3 years ago • 
A company hires a cybersecurity consultant to perform penetration tests and review the rules of engagement documents. What are three examples of typical elements in the rules of engagement document? (Choose three.)
ITExamAnswers Editorial Team asked 3 years ago • 
A company hires a cybersecurity consultant to perform penetration testing to assess government regulation compliance. The consultant is preparing the final report after the penetration testing is completed. In which section of the report should the consultant cover the limitation of the work performed, such as the only dates when the testing is performed and that the findings mentioned in the report do not guarantee that all vulnerabilities are covered?
ITExamAnswers Editorial Team asked 3 years ago • 
A company hires a cybersecurity consultant to perform penetration testing to assess government regulation compliance. Which document must the consultant receive that specifies the agreement between the consultant and the company for the penetration testing engagement?
ITExamAnswers Editorial Team asked 3 years ago • 
A company hires a cybersecurity consultant to perform penetration testing to assess government regulation compliance. The company wants the consultant to disclose information to them and no one else. Which type of NDA agreement should be presented to the consultant?
ITExamAnswers Editorial Team asked 3 years ago • 
A company hires a cybersecurity professional to perform penetration testing to assess government regulation compliance. Which document will be provided to the cybersecurity professional that specifies a detailed and descriptive list of all the deliverables, including the scope of the project, the timeline and report delivery schedule, the location of the work, and the payment schedule?
ITExamAnswers Editorial Team asked 3 years ago • 
A company hires a cybersecurity professional to perform penetration tests to assess government regulation compliance. Which legal document should be provided to the cybersecurity professional that specifies the expectations and constraints, including quality of work, timelines, and cost?
ITExamAnswers Editorial Team asked 3 years ago • 
An employee of a cybersecurity consulting firm in the U.S. is assigned to help assess the system and operation vulnerabilities of several financial institutions in Europe. The task includes penetration tests for compliance. What is a key element the employee must have before starting the assignment?
ITExamAnswers Editorial Team asked 3 years ago • 
Match the parts of Recommendation for Key Management in the NIST SP 800-57 to the description.
ITExamAnswers Editorial Team asked 3 years ago • 
« Previous12345…21Next »
Ask Question

About The Author

ITExam Editorial Team

The ITExamAnswers Editorial Team is a dedicated group of certified IT professionals and network engineers. We rigorously review, verify, and update all exam materials to ensure you receive the most accurate and reliable resources for your certification journey.