QUESTION 8 Which category penetration testing involves the tester having extensive knowledge of the target system and is well suited for internal staff to perform? O Black box O Gray box O Blue box White box QUESTION 9 Which of the following is not true regarding ethics in hacking and penetration testing? O Aside from criminal activity, you should keep client information confidential, even if it is not explicitly detailed in a confidentiality agreement. O You should take every step you can to minimize any disruption to the client's system, which might include performing testing at 2 a.m. on a Sunday. O Today, organizations commonly hire convicted cyber criminals to perform penetration testing and this trend is expected to continue. You should be aware of your own limits and if a task is outside your skillset, tell the client you are not the appropriate person for that specific test. QUESTION 10 Which of the following U.S. Iaws, enacted by Congress in 1995, was the first significant federal legislation designed to provide some protection against computer-based crimes? 0 Computer Fraud and Abuse Act 0 Fraud and Related Activity in Connection with Access Devices o Unlawful Access to Stored Communications Identity Theft Enforcement and Restitution Act