Not/Applicable
Quiz by , created more than 1 year ago

6251808272-101_125

12
0
0
Not/Applicable
Created by Not/Applicable almost 10 years ago
Close

6251808272-101_125

6251808272-101_125

Question 1 of 25

1

An organization does not have adequate resources to administer its large infrastructure. A security administrator wishes to combine the security controls of some of the network devices in the organization. Which of the following methods would BEST accomplish this goal?

Select one of the following:

  • Unified Threat Management

  • Virtual Private Network

  • Single sign on

  • Role-based management

Explanation

Question 2 of 25

1

Which of the following would allow the organization to divide a Class C IP address range into several ranges?

Select one of the following:

  • DMZ

  • Virtual LANs

  • NAT

  • Subnetting

Explanation

Question 3 of 25

1

The security administrator is currently unaware of an incident that occurred a week ago. Which of the following will ensure the administrator is notified in a timely manner in the future?

Select one of the following:

  • User permissions reviews

  • Incident response team

  • Change management

  • Routine auditing

Explanation

Question 4 of 25

1

An access point has been configured for AES encryption but a client is unable to connect to it. Which of the following should be configured on the client to fix this issue?

Select one of the following:

  • WEP

  • CCMP

  • TKIP

  • RC4

Explanation

Question 5 of 25

1

The system administrator is tasked with changing the administrator password across all 2000 computers in the organization. Which of the following should the system administrator implement to accomplish this task?

Select one of the following:

  • A security group

  • A group policy

  • Key escrow

  • Certificate revocation

Explanation

Question 6 of 25

1

A network administrator wants to block both DNS requests and zone transfers coming from outside IP addresses. The company uses a firewall which implements an implicit allow and is currently configured with the following ACL applied to its external interfacE.

PERMIT TCP ANY ANY 80

PERMIT TCP ANY ANY 443

Which of the following rules would accomplish this task? (Select TWO).

Select one or more of the following:

  • Change the firewall default settings so that it implements an implicit deny

  • Apply the current ACL to all interfaces of the firewall

  • Remove the current ACL

  • Add the following ACL at the top of the current ACL DENY TCP ANY ANY 53

  • Add the following ACL at the bottom of the current ACL DENY ICMP ANY ANY 53

  • Add the following ACL at the bottom of the current ACL DENY IP ANY ANY 53

Explanation

Question 7 of 25

1

Which of the following attacks would cause all mobile devices to lose their association with corporate access points while the attack is underway?

Select one of the following:

  • Wireless jamming

  • Evil twin

  • Rogue AP

  • Packet sniffing

Explanation

Question 8 of 25

1

An administrator wants to ensure that the reclaimed space of a hard drive has been sanitized while the computer is in use. Which of the following can be implemented?

Select one of the following:

  • Cluster tip wiping

  • Individual file encryption

  • Full disk encryption

  • Storage retention

Explanation

Question 9 of 25

1

A company is looking to improve their security posture by addressing risks uncovered by a recent penetration test. Which of the following risks is MOST likely to affect the business on a day-to-day basis?

Select one of the following:

  • Insufficient encryption methods

  • Large scale natural disasters

  • Corporate espionage

  • Lack of antivirus software

Explanation

Question 10 of 25

1

Ann, an employee, is cleaning out her desk and disposes of paperwork containing confidential customer information in a recycle bin without shredding it first. This is MOST likely to increase the risk of loss from which of the following attacks?

Select one of the following:

  • Shoulder surfing

  • Dumpster diving

  • Tailgating

  • Spoofing

Explanation

Question 11 of 25

1

A recently installed application update caused a vital application to crash during the middle of the workday. The application remained down until a previous version could be reinstalled on the server, and this resulted in a significant loss of data and revenue.

Which of the following could BEST prevent this issue from occurring again?

Select one of the following:

  • Application configuration baselines

  • Application hardening

  • Application access controls

  • Application patch management

Explanation

Question 12 of 25

1

A security administrator wishes to increase the security of the wireless network. Which of the following BEST addresses this concern?

Select one of the following:

  • Change the encryption from TKIP-based to CCMP-based.

  • Set all nearby access points to operate on the same channel.

  • Configure the access point to use WEP instead of WPA2.

  • Enable all access points to broadcast their SSIDs.

Explanation

Question 13 of 25

1

The system administrator has deployed updated security controls for the network to limit risk of attack. The security manager is concerned that controls continue to function as intended to maintain appropriate security posture.

Which of the following risk mitigation strategies is MOST important to the security manager?

Select one of the following:

  • User permissions

  • Policy enforcement

  • Routine audits

  • Change management

Explanation

Question 14 of 25

1

A company is about to release a very large patch to its customers. An administrator is required to test patch installations several times prior to distributing them to customer PCs.

Which of the following should the administrator use to test the patching process quickly and often?

Select one of the following:

  • A. Create an incremental backup of an unpatched PC

  • B. Create an image of a patched PC and replicate it to servers

  • C. Create a full disk image to restore after each installation

  • D. Create a virtualized sandbox and utilize snapshots

Explanation

Question 15 of 25

1

An auditing team has found that passwords do not meet best business practices. Which of the following will MOST increase the security of the passwords? (Select TWO).

Select one or more of the following:

  • Password Complexity

  • Password Expiration

  • Password Age

  • Password Length

  • Password History

Explanation

Question 16 of 25

1

A vulnerability scan is reporting that patches are missing on a server. After a review, it is determined that the application requiring the patch does not exist on the operating system.

Which of the following describes this cause?

Select one of the following:

  • Application hardening

  • False positive

  • Baseline code review

  • False negative

Explanation

Question 17 of 25

1

Company A submitted a bid on a contract to do work for Company B via email. Company B was insistent that the bid did not come from Company A. Which of the following would have assured that the bid was submitted by Company A?

Select one of the following:

  • Steganography

  • Hashing

  • Encryption

  • Digital Signatures

Explanation

Question 18 of 25

1

Ann, a sales manager, successfully connected her company-issued smartphone to the wireless network in her office without supplying a username/password combination. Upon disconnecting from the wireless network, she attempted to connect her personal tablet computer to the same wireless network and could not connect.

Which of the following is MOST likely the reason?

Select one of the following:

  • The company wireless is using a MAC filter.

  • The company wireless has SSID broadcast disabled.

  • The company wireless is using WEP.

  • The company wireless is using WPA2.

Explanation

Question 19 of 25

1

A network technician is on the phone with the system administration team. Power to the server room was lost and servers need to be restarted. The DNS services must be the first to be restarted. Several machines are powered off. Assuming each server only provides one service, which of the following should be powered on FIRST to establish DNS services?

Select one of the following:

  • Bind server

  • Apache server

  • Exchange server

  • RADIUS server

Explanation

Question 20 of 25

1

A security administrator is reviewing the company's continuity plan. The plan specifies an RTO of six hours and RPO of two days. Which of the following is the plan describing?

Select one of the following:

  • Systems should be restored within six hours and no later than two days after the incident.

  • Systems should be restored within two days and should remain operational for at least six hours.

  • Systems should be restored within six hours with a minimum of two days worth of data.

  • Systems should be restored within two days with a minimum of six hours worth of data.

Explanation

Question 21 of 25

1

The incident response team has received the following email messagE.

From: monitor@ext-company.com
To: security@company.com
Subject: Copyright infringement
A copyright infringement alert was triggered by IP address 13.10.66.5 at 09: 50: 01 GMT.
After reviewing the following web logs for IP 13.10.66.5, the team is unable to correlate and identify the incident.
09: 45: 33 13.10.66.5 http: //remote.site.com/login.asp?user=john
09: 50: 22 13.10.66.5 http: //remote.site.com/logout.asp?user=anne
10: 50: 01 13.10.66.5 http: //remote.site.com/access.asp?file=movie.mov
11: 02: 45 13.10.65.5 http: //remote.site.com/download.asp?movie.mov=ok

Which of the following is the MOST likely reason why the incident response team is unable to identify and correlate the incident?

Select one of the following:

  • The logs are corrupt and no longer forensically sound.

  • Traffic logs for the incident are unavailable.

  • Chain of custody was not properly maintained.

  • Incident time offsets were not accounted for.

Explanation

Question 22 of 25

1

A server dedicated to the storage and processing of sensitive information was compromised with a rootkit and sensitive data was exfiltrated. Which of the following incident response procedures is best suited to restore the server?

Select one of the following:

  • Wipe the storage, reinstall the OS from original media and restore the data from the last known good backup.

  • Keep the data partition, restore the OS from the most current backup and run a full system antivirus scan.

  • Format the storage and reinstall both the OS and the data from the most current backup.

  • Erase the storage, reinstall the OS from most current backup and only restore the data that was not compromised.

Explanation

Question 23 of 25

1

Which of the following describes a type of malware which is difficult to reverse engineer in a virtual lab?

Select one of the following:

  • Armored virus

  • Polymorphic malware

  • Logic bomb

  • Rootkit

Explanation

Question 24 of 25

1

Using a heuristic system to detect an anomaly in a computer's baseline, a system administrator was able to detect an attack even though the company signature based IDS and antivirus did not detect it. Further analysis revealed that the attacker had downloaded an executable file onto the company PC from the USB port, and executed it to trigger a privilege escalation flaw. Which of the following attacks has MOST likely occurred?

Select one of the following:

  • Cookie stealing

  • Zero-day

  • Directory traversal

  • XML injection

Explanation

Question 25 of 25

1

After copying a sensitive document from his desktop to a flash drive, Joe, a user, realizes that the document is no longer encrypted. Which of the following can a security technician implement to ensure that documents stored on Joe's desktop remain encrypted when moved to external media or other network based storage?

Select one of the following:

  • Whole disk encryption

  • Removable disk encryption

  • Database record level encryption

  • File level encryption

Explanation

Previous
Next