Free 312-75: C-Council Instructor Exam Questions and Answers

An instructor wants to begin a class discussion on the risks of weak password policies and encourage learners to give detailed answers. Which type of question should the instructor use?

• AA. Open-ended question
• BB. Rhetorical question
• CC. Closed question
• DD. Leading question

After the third day of a five-day class, an instructor wants to know whether the pace of the lectures suits the learners so adjustments can be made on the remaining days. Which of the following would be the BEST source of this information?

• AA. A comment from the training center manager who passed the room
• BB. The instructor's own impression of how the lectures went
• CC. The learners' scores on the module quiz taken that morning
• DD. A short anonymous learner feedback form with questions about pace

During a CHFI class on data acquisition, a learner asks in what order to collect data from a suspect workstation that is still powered on. Which sequence should the instructor demonstrate?

• AA. Acquire a bit-stream image of the hard drive, then capture RAM and other volatile data
• BB. Shut down the workstation normally, then acquire an image of the hard drive and its RAM
• CC. Run a malware scan on the workstation, then acquire a bit-stream image of the hard drive
• DD. Capture RAM and other volatile data, then acquire a bit-stream image of the hard drive

At the end of a module, an instructor needs to determine whether each learner can actually configure a firewall rule set in the lab. Which evaluation method is MOST appropriate?

• AA. A learner self-assessment form on confidence with firewalls
• BB. A written multiple-choice test on firewall terminology
• CC. A group discussion on firewall policy design
• DD. An observed lab task scored with a checklist of required steps

A learner answers a question about the phases of the attack lifecycle. The answer is correct for the first two phases but wrong for the third. How should the instructor respond?

• AA. Move on to the next learner and cover the third phase later in the lecture
• BB. Acknowledge the correct parts and then clarify the third phase with an example
• CC. Restate the whole answer correctly without referring to the learner's response
• DD. Ask the learner to read the course material again and answer after the break

Which medium is BEST suited to capturing learners' ideas as they are offered during a class discussion?

• AA. A prepared slide deck
• BB. A printed handout
• CC. A flip chart
• DD. A pre-recorded video

After presenting the packet-capture analysis module in a CEH class, an instructor asks, "Does everyone understand?" and the room stays silent. The instructor wants to find out what the learners actually understood. Which of the following questions would be MOST appropriate to ask next?

• AA. "Can the most experienced person in the room confirm that the capture analysis was clear?"
• BB. "How would you tell a normal TCP handshake from a SYN scan in the capture we just reviewed?"
• CC. "Is there anyone who would like to ask me a question about the packet-capture material?"
• DD. "Raise your hand if you were able to follow each of the steps I just demonstrated."

An instructor needs learners to be able to run an Nmap scan using several timing and output options by the end of a 90-minute session. Which of the following instructional methods is MOST appropriate?

• AA. A slide lecture covering each option, followed by a question and answer period
• BB. A group discussion in which learners share what they already know about Nmap
• CC. A reading assignment from the courseware followed by a short written quiz
• DD. A demonstration of the commands followed by supervised hands-on practice

At the start of a CEH lab exercise, one learner reports that the attacker virtual machine cannot reach the target virtual machine, while every other learner's machines communicate normally on the isolated lab network. Which of the following should the instructor check FIRST?

• AA. Whether the target image must be restored from the original course files
• BB. Whether the physical switch in the classroom has been restarted recently
• CC. Whether the network adapters of both VMs are set to the same virtual network
• DD. Whether the hypervisor needs to be reinstalled on the learner's workstation

After a five-day class, an instructor reviews the learner evaluations. Ratings for content accuracy average 4.6 out of 5 and for lab availability 4.4, but pace of delivery averages 2.9. Written comments on the last two days repeat "too much covered too fast," and quiz scores for the final two modules are well below earlier modules. Which of the following conclusions is BEST supported by this data?

• AA. The lab environment was unreliable during the final two days of the class
• BB. The learners lacked the prerequisite knowledge needed for the final modules
• CC. The instructor should review the time allocated to the later modules and adjust pacing
• DD. The courseware for the final modules is inaccurate and should be revised