maxwell3254
Quiz by , created more than 1 year ago

study

112
6
0
maxwell3254
Created by maxwell3254 over 9 years ago
Close

401 cont

Question 1 of 120

1

Which of the following protocols operates at the HIGHEST level of the OSI model?

Select one of the following:

  • ICMP

  • IPSec

  • SCP

  • TCP

Explanation

Question 2 of 120

1

Joe, the system administrator, has been asked to calculate the Annual Loss Expectancy (ALE) for a $5,000 server,which often crashes. In the past year, the server has crashed 10 times, requiring a system reboot to recover with only 10% loss of data or function. Which of the following is the ALE of this server?

Select one of the following:

  • $500

  • $5,000

  • $25,000

  • $50,000

Explanation

Question 3 of 120

1

Which of the following should an administrator implement to research current attack methodologies?

Select one of the following:

  • Design reviews

  • Honeypot

  • Vulnerability scanner

  • Code reviews

Explanation

Question 4 of 120

1

Which of the following can be implemented in hardware or software to protect a web server from cross-site scripting attacks?

Select one of the following:

  • Intrusion Detection System

  • Flood Guard Protection

  • Web Application Firewall

  • URL Content Filter

Explanation

Question 5 of 120

1

Which of the following means of wireless authentication is easily vulnerable to spoofing?

Select one of the following:

  • MAC Filtering

  • WPA - LEAP

  • WPA - PEAP

  • Enabled SSID

Explanation

Question 6 of 120

1

The BEST methods for a web developer to prevent the website application code from being vulnerable to cross-site request forgery (XSRF) are to: (Select TWO)

Select one or more of the following:

  • permit redirection to Internet-facing web URLs

  • ensure all HTML tags are enclosed in angle brackets, e.g., "<" and ">"

  • validate and filter input on the server side and client side

  • use a web proxy to pass website requests between the user and the application

  • restrict and sanitize use of special characters in input and URLs

Explanation

Question 7 of 120

1

Jane, a security administrator, needs to implement a secure wireless authentication method that uses a remote RADIUS server for authentication. Which of the following is an authentication method Jane should use?

Select one or more of the following:

  • WPA2-PSK

  • WEP-PSK

  • CCMP

  • LEAP

Explanation

Question 8 of 120

1

Computer evidence at a crime scene is documented with a tag stating who had possession of the evidence at a given time. Which of the following does this illustrate?

Select one or more of the following:

  • System image capture

  • Record time offset

  • Order of volatility

  • Chain of custody

Explanation

Question 9 of 120

1

A network administrator is configuring access control for the sales department which has high employee turnover. Which of the following is BEST suited when assigning user rights to individuals in the sales department?

Select one or more of the following:

  • Time of day restrictions

  • Group based privileges

  • User assigned privileges

  • Domain admin restrictions

Explanation

Question 10 of 120

1

Which of the following is being tested when a company's payroll server is powered off for eight hours?

Select one or more of the following:

  • Succession plan

  • Business impact document

  • Continuity of operations plan

  • Risk assessment plan

Explanation

Question 11 of 120

1

Which of the following preventative controls would be appropriate for responding to a directive to reduce the attack surface of a specific host?

Select one or more of the following:

  • Installing anti-malware

  • Implementing an IDS

  • Taking a baseline configuration

  • Disabling unnecessary services

Explanation

Question 12 of 120

1

A security manager must remain aware of the security posture of each system. Which of the following supports this requirement?

Select one or more of the following:

  • Training staff on security policies

  • Establishing baseline reporting

  • Installing anti-malware software

  • Disabling unnecessary accounts/services

Explanation

Question 13 of 120

1

Deploying a wildcard certificate is one strategy to:

Select one or more of the following:

  • secure the certificate's private key.

  • increase the certificate's encryption key length.

  • extend the renewal date of the certificate.

  • reduce the certificate management burden.

Explanation

Question 14 of 120

1

The security administrator needs to manage traffic on a layer 3 device to support FTP from a new remote site. Which of the following would need to be implemented?

Select one or more of the following:

  • Implicit deny

  • VLAN management

  • Port security

  • Access control lists

Explanation

Question 15 of 120

1

A network administrator has been tasked with securing the WLAN. Which of the following cryptographic products would be used to provide the MOST secure environment for the WLAN?

Select one or more of the following:

  • WPA2 CCMP

  • WPA

  • WPA with MAC filtering

  • WPA2 TKIP

Explanation

Question 16 of 120

1

A server with the IP address of 10.10.2.4 has been having intermittent connection issues. The logs show repeated connection attempts from the following IPs: 10.10.3.16
10.10.3.23
212.178.24.26
217.24.94.83
These attempts are overloading the server to the point that it cannot respond to traffic. Which of the following attacks is occurring?

Select one or more of the following:

  • XSS

  • DDoS

  • DoS

  • Xmas

Explanation

Question 17 of 120

1

Which of the following ciphers would be BEST used to encrypt streaming video?

Select one or more of the following:

  • RSA

  • RC4

  • SHA1

  • 3DES

Explanation

Question 18 of 120

1

A user attempting to log on to a workstation for the first time is prompted for the following information before being granted access: username, password, and a four-digit security pin that was mailed to him during account registration. This is an example of which of the following?

Select one or more of the following:

  • Dual-factor authentication

  • Multifactor authentication

  • Single factor authentication

  • Biometric authentication

Explanation

Question 19 of 120

1

After analyzing and correlating activity from multiple sensors, the security administrator has determined that a group of very well organized individuals from an enemy country is responsible for various attempts to breach the company network, through the use of very sophisticated and targeted attacks. Which of the following is this an example of?

Select one or more of the following:

  • Privilege escalation

  • Advanced persistent threat

  • Malicious insider threat

  • Spear phishing

Explanation

Question 20 of 120

1

Which of the following is true about input validation in a client-server architecture, when data integrity is critical to the organization?

Select one or more of the following:

  • It should be enforced on the client side only.

  • It must be protected by SSL encryption.

  • It must rely on the user's knowledge of the application.

  • It should be performed on the server side.

Explanation

Question 21 of 120

1

A merchant acquirer has the need to store credit card numbers in a transactional database in a high performance environment. Which of the following BEST protects the credit card data?

Select one or more of the following:

  • Database field encryption

  • File-level encryption

  • Data loss prevention system

  • Full disk encryption

Explanation

Question 22 of 120

1

A bank has a fleet of aging payment terminals used by merchants for transactional processing. The terminals currently support single DES but require an upgrade in order to be compliant with security standards. Which of the following is likely to be the simplest upgrade to the aging terminals which will improve in-transit protection of transactional data?

Select one or more of the following:

  • AES

  • 3DES

  • RC4

  • WPA2

Explanation

Question 23 of 120

1

Which of the following is BEST at blocking attacks and providing security at layer 7 of the OSI model?

Select one or more of the following:

  • WAF

  • NIDS

  • Routers

  • Switches

Explanation

Question 24 of 120

1

Which of the following is BEST used to capture and analyze network traffic between hosts on the same network segment?

Select one or more of the following:

  • Protocol analyzer

  • Router

  • Firewall

  • HIPS

Explanation

Question 25 of 120

1

A datacenter requires that staff be able to identify whether or not items have been removed from the facility. Which of the following controls will allow the organization to provide automated notification of item removal?

Select one or more of the following:

  • CCTV

  • Environmental monitoring

  • RFID

  • EMI shielding

Explanation

Question 26 of 120

1

A malicious person gained access to a datacenter by ripping the proximity badge reader off the wall near the datacenter entrance. This caused the electronic locks on the datacenter door to release because the

Select one or more of the following:

  • badge reader was improperly installed

  • system was designed to fail open for life-safety

  • system was installed in a fail closed configuration

  • system used magnetic locks and the locks became demagnetized

Explanation

Question 27 of 120

1

The concept of rendering data passing between two points over an IP based network impervious to all but the most sophisticated advanced persistent threats is BEST categorized as which of the following?

Select one or more of the following:

  • Stream ciphers

  • Transport encryption

  • Key escrow

  • Block ciphers

Explanation

Question 28 of 120

1

On Monday, all company employees report being unable to connect to the corporate wireless network, which uses 802.1x with PEAP. A technician verifies that no configuration changes were made to the wireless network and its supporting infrastructure, and that there are no outages. Which of the following is the MOST likely cause for this issue?

Select one or more of the following:

  • Too many incorrect authentication attempts have caused users to be temporarily disabled

  • The DNS server is overwhelmed with connections and is unable to respond to queries

  • The company IDS detected a wireless attack and disabled the wireless network

  • The Remote Authentication Dial-In User Service server certificate has expired

Explanation

Question 29 of 120

1

Which of the following would BEST deter an attacker trying to brute force 4-digit PIN numbers to access an account at a bank teller machine?

Select one or more of the following:

  • Account expiration settings

  • Complexity of PIN

  • Account lockout settings

  • PIN history requirements

Explanation

Question 30 of 120

1

An administrator discovers that many users have used their same passwords for years even though the network requires that the passwords be changed every six weeks. Which of the following, when used together, would BEST prevent users from reusing their existing password? (Select TWO).

Select one or more of the following:

  • Length of password

  • Password history

  • Minimum password age

  • Password expiration

  • Password complexity

  • Non-dictionary words

Explanation

Question 31 of 120

1

A recent audit has discovered that at the time of password expiration clients are able to recycle the previous credentials for authentication. Which of the following controls should be used together to prevent this from occurring? (select two)

Select one or more of the following:

  • Password age

  • Password hashing

  • Password complexity

  • Password history

  • Password length

Explanation

Question 32 of 120

1

A system administrator is configuring UNIX accounts to authenticate against an external server. The configuration file asks for the following information DC=ServerName and DC=COM. Which of the following authentication services is being used?

Select one or more of the following:

  • RADIUS

  • SAML

  • TACACS+

  • LDAP

Explanation

Question 33 of 120

1

In Kerberos, the Ticket Granting Ticket (TGT) is used for which of the following?

Select one or more of the following:

  • Identification

  • Authorization

  • Authentication

  • Multifactor authentication

Explanation

Question 34 of 120

1

Which of the following network design elements allows for many internal devices to share one public IP address?

Select one or more of the following:

  • DNAT

  • PAT

  • DNS

  • DMZ

Explanation

Question 35 of 120

1

Which of the following components of an all-in-one security appliance would MOST likely be configured in order to restrict access to peer-to-peer file sharing websites?

Select one or more of the following:

  • Spam filter

  • URL filter

  • Content inspection

  • Malware inspection

Explanation

Question 36 of 120

1

When considering a vendor-specific vulnerability in critical industrial control systems which of the following techniques supports availability?

Select one or more of the following:

  • Deploying identical application firewalls at the border

  • Incorporating diversity into redundant design

  • Enforcing application white lists on the support workstations

  • Ensuring the systems' anti-virus definitions are up-to-date

Explanation

Question 37 of 120

1

During the information gathering stage of a deploying role-based access control model, which of the following information is MOST likely required?

Select one or more of the following:

  • Conditional rules under which certain systems may be accessed

  • Matrix of job titles with required access privileges

  • Clearance levels of all company personnel

  • Normal hours of business operation

Explanation

Question 38 of 120

1

The Chief Technical Officer (CTO) has been informed of a potential fraud committed by a database administrator performing several other job functions within the company. Which of the following is the BEST method to prevent such activities in the future?

Select one or more of the following:

  • Job rotation

  • Separation of duties

  • Mandatory Vacations

  • Least Privilege

Explanation

Question 39 of 120

1

Ann would like to forward some Personal Identifiable Information to her HR department by email, but she is worried about the confidentiality of the information. Which of the following will accomplish this task securely?

Select one or more of the following:

  • Digital Signatures

  • Hashing

  • Secret Key

  • Encryption

Explanation

Question 40 of 120

1

A company is trying to limit the risk associated with the use of unapproved USB devices to copy documents. Which of the following would be the BEST technology control to use in this scenario?

Select one or more of the following:

  • Content filtering

  • IDS

  • Audit Logs

  • DLP

Explanation

Question 41 of 120

1

A recently installed application update caused a vital application to crash during the middle of the workday. The application remained down until a previous version could be reinstalled on the server, and this resulted in a significant loss of data and revenue. Which of the following could BEST prevent this issue from occurring again?

Select one or more of the following:

  • Application configuration baselines

  • Application hardening

  • Application access controls

  • Application patch management

Explanation

Question 42 of 120

1

A security administrator wishes to increase the security of the wireless network. Which of the following BEST addresses this concern?

Select one or more of the following:

  • Change the encryption from TKIP-based to CCMP-based.

  • Set all nearby access points to operate on the same channel.

  • Configure the access point to use WEP instead of WPA2.

  • Enable all access points to broadcast their SSIDs.

Explanation

Question 43 of 120

1

The system administrator has deployed updated security controls for the network to limit risk of attack. The security manager is concerned that controls continue to function as intended to maintain appropriate security posture. Which of the following risk mitigation strategies is MOST important to the security manager?

Select one or more of the following:

  • User permissions

  • Policy enforcement

  • Routine audits

  • Change management

Explanation

Question 44 of 120

1

A company is about to release a very large patch to its customers. An administrator is required to test patch installations several times prior to distributing them to customer PCs. Which of the following should the administrator use to test the patching process quickly and often?

Select one or more of the following:

  • Create an incremental backup of an unpatched PC

  • Create an image of a patched PC and replicate it to servers

  • Create a full disk image to restore after each installation

  • Create a virtualized sandbox and utilize snapshots

Explanation

Question 45 of 120

1

An auditing team has found that passwords do not meet best business practices. Which of the following will MOST increase the security of the passwords? (Select TWO).

Select one or more of the following:

  • Password Complexity

  • Password Expiration

  • Password Age

  • Password length

  • Password History

Explanation

Question 46 of 120

1

A vulnerability scan is reporting that patches are missing on a server. After a review, it is determined that the application requiring the patch does not exist on the operating system. Which of the following describes this cause?

Select one or more of the following:

  • Application hardening

  • False positive

  • Baseline code review

  • False negative

Explanation

Question 47 of 120

1

Company A submitted a bid on a contract to do work for Company B via email. Company B was insistent that the bid did not come from Company A. Which of the following would have assured that the bid was submitted by Company A?

Select one or more of the following:

  • Steganography

  • Hashing

  • Encryption

  • Digital Signatures

Explanation

Question 48 of 120

1

Ann, a sales manager, successfully connected her company-issued smartphone to the wireless network in her office without supplying a username/password combination. Upon disconnecting from the wireless network, she attempted to connect her personal tablet computer to the same wireless network and could not connect. Which of the following is MOST likely the reason?

Select one or more of the following:

  • The company wireless is using a MAC filter.

  • The company wireless has SSID broadcast disabled.

  • The company wireless is using WEP.

  • The company wireless is using WPA2.

Explanation

Question 49 of 120

1

A network technician is on the phone with the system administration team. Power to the server room was lost and servers need to be restarted. The DNS services must be the first to be restarted. Several machines are powered off. Assuming each server only provides one service, which of the following should be powered on FIRST to establish DNS services?

Select one or more of the following:

  • Bind server

  • Apache server

  • Exchange server

  • RADIUS server

Explanation

Question 50 of 120

1

A security administrator is reviewing the company's continuity plan. The plan specifies an RTO of six hours and RPO of two days. Which of the following is the plan describing?

Select one or more of the following:

  • Systems should be restored within six hours and no later than two days after the incident.

  • Systems should be restored within two days and should remain operational for at least six hours.

  • Systems should be restored within six hours with a minimum of two days worth of data.

  • Systems should be restored within two days with a minimum of six hours worth of data.

Explanation

Question 51 of 120

1

The incident response team has received the following email message.
From: monitor@ext-company.com To: security@company.com Subject: Copyright infringement A copyright infringement alert was triggered by IP address 13.10.66.5 at 09: 50: 01 GMT.
After reviewing the following web logs for IP 13.10.66.5, the team is unable to correlate and identify the incident.
09: 45: 33 13.10.66.5 http: //remote.site.com/login.asp?user=john 09: 50: 22 13.10.66.5 http: //remote.site.com/logout.asp?user=anne 10: 50: 01 13.10.66.5 http: //remote.site.com/access.asp?file=movie.mov 11: 02: 45 13.10.65.5 http: //remote.site.com/download.asp?movie.mov=ok
Which of the following is the MOST likely reason why the incident response team is unable to identify and correlate the incident?

Select one or more of the following:

  • The logs are corrupt and no longer forensically sound.

  • Traffic logs for the incident are unavailable.

  • Chain of custody was not properly maintained.

  • Incident time offsets were not accounted for.

Explanation

Question 52 of 120

1

A server dedicated to the storage and processing of sensitive information was compromised with a rootkit and sensitive data was exfiltrated. Which of the following incident response procedures is best suited to restore the server?

Select one or more of the following:

  • Wipe the storage, reinstall the OS from original media and restore the data from the last known good backup

  • Keep the data partition, restore the OS from the most current backup and run a full system antivirus scan

  • Format the storage and reinstall both the OS and the data from the most current backup

  • Erase the storage, reinstall the OS from most current backup and only restore the data that was not compromised

Explanation

Question 53 of 120

1

Which of the following describes a type of malware which is difficult to reverse engineer in a virtual lab?

Select one or more of the following:

  • Armored virus

  • Polymorphic malware

  • Logic bomb

  • Rootkit

Explanation

Question 54 of 120

1

Using a heuristic system to detect an anomaly in a computer's baseline, a system administrator was able to detect an attack even though the company signature based IDS and antivirus did not detect it. Further analysis revealed that the attacker had downloaded an executable file onto the company PC from the USB port, and executed it to trigger a privilege escalation flaw. Which of the following attacks has MOST likely occurred?

Select one or more of the following:

  • Cookie stealing

  • Zero-day

  • Directory traversal

  • XML injection

Explanation

Question 55 of 120

1

After copying a sensitive document from his desktop to a flash drive, Joe, a user, realizes that the document is no longer encrypted, Which of the following can a security technician implement to ensure that documents stored on Joe's desktop remain encrypted when moved to external media or other network based storage?

Select one or more of the following:

  • Whole disk encryption

  • Removable disk encryption

  • Database record level encryption

  • File level encryption

Explanation

Question 56 of 120

1

A security administrator must implement a system to allow clients to securely negotiate encryption keys with the company's server over a public unencrypted communication channel. Which of the following implements the required secure key negotiation? (Select TWO).

Select one or more of the following:

  • PBKDF2

  • Symmetric encryption

  • Steganography

  • ECDHE

  • Diffie-Hellman

Explanation

Question 57 of 120

1

Acme Corp has selectively outsourced proprietary business processes to ABC Services. Due to some technical issues, ABC services wants to send some of Acme Corp's debug data to a third party vendor for problem resolution. Which of the following MUST be considered prior to sending data to a third party?

Select one or more of the following:

  • The data should be encrypted prior to transport

  • This would not constitute unauthorized data sharing

  • This may violate data ownership and non-disclosure agreements

  • Acme Corp should send the data to ABC Services' vendor instead

Explanation

Question 58 of 120

1

An organization has introduced token-based authentication to system administrators due to risk of password compromise. The tokens have a set of numbers that automatically change every 30 seconds. Which of the following type of authentication mechanism is this?

Select one or more of the following:

  • TOTP

  • Smart Card

  • CHAP

  • HOTP

Explanation

Question 59 of 120

1

A security technician at a small business is worried about the Layer 2 switches in the network suffering from a DoS style attack caused by staff incorrectly cabling network connections between switches. Which of the following will BEST mitigate the risk if implemented on the switches?

Select one or more of the following:

  • Spanning tree

  • Flood guards

  • Access control lists

  • Syn flood

Explanation

Question 60 of 120

1

An administrator wants to establish a WiFi network using a high gain directional antenna with a narrow radiation pattern to connect two buildings separated by a very long distance. Which of the following antennas would be BEST for this situation?

Select one or more of the following:

  • Dipole

  • Yagi

  • Sector

  • Omni

Explanation

Question 61 of 120

1

An attacker used an undocumented and unknown application exploit to gain access to a file server. Which of the following BEST describes this type of attack?

Select one or more of the following:

  • Integer overflow

  • Cross-site scripting

  • Zero-day

  • Session hijacking

  • XML injection

Explanation

Question 62 of 120

1

Which of the following is an XML based open standard used in the exchange of authentication and authorization information between different parties?

Select one or more of the following:

  • LDAP

  • SAML

  • TACACS+

  • Kerberos

Explanation

Question 63 of 120

1

Which of the following ports and protocol types must be opened on a host with a host- based firewall to allow incoming SFTP connections?

Select one or more of the following:

  • 21/UDP

  • 21/TCP

  • 22/UDP

  • 22/TCP

Explanation

Question 64 of 120

1

A user, Ann, is reporting to the company IT support group that her workstation screen is blank other than a window with a message requesting payment or else her hard drive will be formatted. Which of the following types of malware is on Ann's workstation?

Select one or more of the following:

  • Trojan

  • Spyware

  • Adware

  • Ransomware

Explanation

Question 65 of 120

1

Which of the following controls can be implemented together to prevent data loss in the event of theft of a mobile device storing sensitive information? (Select TWO).

Select one or more of the following:

  • Full device encryption

  • Screen locks

  • GPS

  • Asset tracking

  • Inventory control

Explanation

Question 66 of 120

1

A way to assure data at-rest is secure even in the event of loss or theft is to use

Select one or more of the following:

  • full device encryption

  • special permissions on the file system

  • Trusted Platform Module integration

  • Access Control Lists

Explanation

Question 67 of 120

1

A security audit identifies a number of large email messages being sent by a specific user from their company email account to another address external to the company. These messages were sent prior to a company data breach, which prompted the security audit. The user was one of a few people who had access to the leaked data. Review of the suspect's emails show they consist mostly of pictures of the user at various locations during a recent vacation. No suspicious activities from other users who have access to the data were discovered. Which of the following is occurring?

Select one or more of the following:

  • The user is encrypting the data in the outgoing messages.

  • The user is using steganography.

  • The user is spamming to obfuscate the activity.

  • The user is using hashing to embed data in the emails.

Explanation

Question 68 of 120

1

A security analyst is reviewing firewall logs while investigating a compromised web server. The following ports appear in the log.
22, 25, 445, 1433, 3128, 3389, 6667

Select one or more of the following:

  • LDAP

  • HTTP

  • RDP

  • HTTPS

Explanation

Question 69 of 120

1

An organization does not want the wireless network name to be easily discovered. Which of the following software features should be configured on the access points?

Select one or more of the following:

  • SSID broadcast

  • MAC filter

  • WPA2

  • Antenna placement

Explanation

Question 70 of 120

1

A computer is suspected of being compromised by malware. The security analyst examines the computer and finds that a service called Telnet is running and connecting to an external website over port 443. This Telnet service was found by comparing the system's services to the list of standard services on the company's system image. This review process depends on:

Select one or more of the following:

  • MAC filtering

  • system hardening

  • rogue machine detection

  • baselining

Explanation

Question 71 of 120

1

A software developer wants to prevent stored passwords from being easily decrypted. When the password is stored by the application, additional text is added to each password before the password is hashed. This technique is known as:

Select one or more of the following:

  • symmetric cryptography

  • private key cryptography

  • salting

  • rainbow tables

Explanation

Question 72 of 120

1

In which of the following steps of incident response does a team analyze the incident and determine steps to prevent a future occurrence?

Select one or more of the following:

  • Mitigation

  • Identification

  • Preparation

  • Lessons learned

Explanation

Question 73 of 120

1

A security technician has been asked to recommend an authentication mechanism that will allow users to authenticate using a password that will only be valid for a predefined time interval. Which of the following should the security technician recommend?

Select one or more of the following:

  • CHAP

  • TOTP

  • HOTP

  • PAP

Explanation

Question 74 of 120

1

A security administrator must implement a wireless encryption system to secure mobile devices' communication. Some users have mobile devices which only support 56-bit encryption. Which of the following wireless encryption methods should be implemented?

Select one or more of the following:

  • RC4

  • AES

  • MD5

  • TKIP

Explanation

Question 75 of 120

1

After a security incident involving a physical asset, which of the following should be done at the beginning?

Select one or more of the following:

  • Record every person who was in possession of assets, continuing post-incident

  • Create working images of data in the following order: hard drive then RAM

  • Back up storage devices so work can be performed on the devices immediately

  • Write a report detailing the incident and mitigation suggestions

Explanation

Question 76 of 120

1

Which of the following is the GREATEST security risk of two or more companies working together under a Memorandum of Understanding?

Select one or more of the following:

  • Budgetary considerations may not have been written into the MOU, leaving an entity to absorb more cost than intended at signing

  • MOUs have strict policies in place for services performed between the entities and the penalties for compromising a partner are high

  • MOUs are generally loose agreements and therefore may not have strict guidelines in place to protect sensitive data between the two entities

  • MOUs between two companies working together cannot be held to the same legal standards as SLAs

Explanation

Question 77 of 120

1

Joe, a user, reports to the system administrator that he is receiving an error stating his certificate has been revoked. Which of the following is the name of the database repository for these certificates?

Select one or more of the following:

  • CSR

  • OSCP

  • CA

  • CRL

Explanation

Question 78 of 120

1

A software company has completed a security assessment. The assessment states that the company should implement fencing and lighting around the property. Additionally, the assessment states that production releases of their software should be digitally signed. Given the recommendations, the company was deficient in which of the following core security areas? (Select TWO)

Select one or more of the following:

  • Fault tolerance

  • Encryption

  • Availability

  • Integrity

  • Safety

  • Confidentiality

Explanation

Question 79 of 120

1

A user was reissued a smart card after the previous smart card had expired. The user is able to log into the domain but is now unable to send digitally signed or encrypted email. Which of the following would the user need to perform?

Select one or more of the following:

  • Remove all previous smart card certificates from the local certificate store

  • Publish the new certificates to the global address list

  • Make the certificates available to the operating system

  • Recover the previous smart card certificates

Explanation

Question 80 of 120

1

Users are encouraged to click on a link in an email to obtain exclusive access to the newest version of a popular Smartphone. This is an example of

Select one or more of the following:

  • scarcity

  • familiarity

  • intimidation

  • trust

Explanation

Question 81 of 120

1

Which of the following types of attacks involves interception of authentication traffic in an attempt to gain unauthorized access to a wireless network?

Select one or more of the following:

  • Near field communication

  • IV attack

  • Evil twin

  • Replay attack

Explanation

Question 82 of 120

1

Which of the following is a BEST practice when dealing with user accounts that will only need to be active for a limited time period?

Select one or more of the following:

  • When creating the account, set the account to not remember password history

  • When creating the account, set an expiration date on the account

  • When creating the account, set a password expiration date on the account

  • When creating the account, set the account to have time of day restrictions

Explanation

Question 83 of 120

1

Which of the following types of authentication packages user credentials in a ticket?

Select one or more of the following:

  • Kerberos

  • LDAP

  • TACACS+

  • RADIUS

Explanation

Question 84 of 120

1

Which of the following is required to allow multiple servers to exist on one physical server?

Select one or more of the following:

  • Software as a Service (SaaS)

  • Platform as a Service (PaaS)

  • Virtualization

  • Infrastructure as a Service (IaaS)

Explanation

Question 85 of 120

1

Several employees submit the same phishing email to the administrator. The administrator finds that the links in the email are not being blocked by the company's security device. Which of the following might the administrator do in the short term to prevent the emails from being received?

Select one or more of the following:

  • Configure an ACL

  • Implement a URL filter

  • Add the domain to a block list

  • Enable TLS on the mail server

Explanation

Question 86 of 120

1

A company has several conference rooms with wired network jacks that are used by both employees and guests. Employees need access to internal resources and guests only need access to the Internet. Which of the following combinations is BEST to meet the requirements?

Select one or more of the following:

  • NAT and DMZ

  • VPN and IPSec

  • Switches and a firewall

  • 802.1x and VLANs

Explanation

Question 87 of 120

1

LDAP and Kerberos are commonly used for which of the following?

Select one or more of the following:

  • To perform queries on a directory service

  • To store usernames and passwords for Federated Identity

  • To sign SSL wildcard certificates for subdomains

  • To utilize single sign-on capabilities

Explanation

Question 88 of 120

1

An administrator needs to renew a certificate for a web server. Which of the following should be submitted to a CA?

Select one or more of the following:

  • CSR

  • Recovery agent

  • Private key

  • CRL

Explanation

Question 89 of 120

1

An administrator needs to submit a new CSR to a CA. Which of the following is a valid FIRST step?

Select one or more of the following:

  • Generate a new private key based on AES

  • Generate a new public key based on RSA

  • Generate a new public key based on AES

  • Generate a new private key based on RSA

Explanation

Question 90 of 120

1

The security team would like to gather intelligence about the types of attacks being launched against the organization. Which of the following would provide them with the MOST information?

Select one or more of the following:

  • Implement a honeynet

  • Perform a penetration test

  • Examine firewall logs

  • Deploy an IDS

Explanation

Question 91 of 120

1

After recovering from a data breach in which customer data was lost, the legal team meets with the Chief Security Officer (CSO) to discuss ways to better protect the privacy of customer data. Which of the following controls support this goal?

Select one or more of the following:

  • Contingency planning

  • Encryption and stronger access control

  • Hashing and non-repudiation

  • Redundancy and fault tolerance

Explanation

Question 92 of 120

1

A security engineer, Joe, has been asked to create a secure connection between his mail server and the mail server of a business partner. Which of the following protocol would be MOST appropriate?

Select one or more of the following:

  • HTTPS

  • SSH

  • FTP

  • TLS

Explanation

Question 93 of 120

1

A new network administrator is setting up a new file server for the company. Which of the following would be the BEST way to manage folder security?

Select one or more of the following:

  • Assign users manually and perform regular user access reviews

  • Allow read only access to all folders and require users to request permission

  • Assign data owners to each folder and allow them to add individual users to each folder

  • Create security groups for each folder and assign appropriate users to each group

Explanation

Question 94 of 120

1

A recent vulnerability scan found that Telnet is enabled on all network devices. Which of the following protocols should be used instead of Telnet?

Select one or more of the following:

  • SCP

  • SSH

  • SFTP

  • SSL

Explanation

Question 95 of 120

1

A network engineer is setting up a network for a company. There is a BYOD policy for the employees so that they can connect their laptops and mobile devices. Which of the following technologies should be employed to separate the administrative network from the network in which all of the employees' devices are connected?

Select one or more of the following:

  • VPN

  • VLAN

  • WPA2

  • MAC filtering

Explanation

Question 96 of 120

1

A network administrator is asked to send a large file containing PII to a business associate. Which of the following protocols is the BEST choice to use?

Select one or more of the following:

  • SSH

  • SFTP

  • SMTP

  • FTP

Explanation

Question 97 of 120

1

When performing the daily review of the system vulnerability scans of the network Joe, the administrator, noticed several security related vulnerabilities with an assigned vulnerability identification number. Joe researches the assigned vulnerability identification number from the vendor website. Joe proceeds with applying the recommended solution for identified vulnerability. Which of the following is the type of vulnerability described?

Select one or more of the following:

  • Network based

  • IDS

  • Signature based

  • Host based

Explanation

Question 98 of 120

1

A malicious individual is attempting to write too much data to an application's memory. Which of the following describes this type of attack?

Select one or more of the following:

  • Zero-day

  • SQL injection

  • Buffer overflow

  • XSRF

Explanation

Question 99 of 120

1

Ann, a security administrator, wishes to replace their RADIUS authentication with a more secure protocol, which can utilize EAP. Which of the following would BEST fit her objective?

Select one or more of the following:

  • CHAP

  • SAML

  • Kerberos

  • Diameter

Explanation

Question 100 of 120

1

Ann, a security administrator, has concerns regarding her company's wireless network. The network is open and available for visiting prospective clients in the conference room, but she notices that many more devices are connecting to the network than should be. Which of the following would BEST alleviate Ann's concerns with minimum disturbance of current functionality for clients?

Select one or more of the following:

  • Enable MAC filtering on the wireless access point

  • Configure WPA2 encryption on the wireless access point

  • Lower the antenna's broadcasting power

  • Disable SSID broadcasting

Explanation

Question 101 of 120

1

Which of the following is a security concern regarding users bringing personally-owned devices that they connect to the corporate network?

Select one or more of the following:

  • Cross-platform compatibility issues between personal devices and server-based applications

  • Lack of controls in place to ensure that the devices have the latest system patches and signature files

  • Non-corporate devices are more difficult to locate when a user is terminated

  • Non-purchased or leased equipment may cause failure during the audits of company- owned assets

Explanation

Question 102 of 120

1

Due to issues with building keys being duplicated and distributed, a security administrator wishes to change to a different security control regarding a restricted area. The goal is to provide access based upon facial recognition. Which of the following will address this requirement?

Select one or more of the following:

  • Set up mantraps to avoid tailgating of approved users

  • Place a guard at the entrance to approve access

  • Install a fingerprint scanner at the entrance

  • Implement proximity readers to scan users' badges

Explanation

Question 103 of 120

1

A security administrator has concerns regarding employees saving data on company provided mobile devices. Which of the following would BEST address the administrator's concerns?

Select one or more of the following:

  • Install a mobile application that tracks read and write functions on the device

  • Create a company policy prohibiting the use of mobile devices for personal use

  • Enable GPS functionality to track the location of the mobile devices

  • Configure the devices so that removable media use is disabled

Explanation

Question 104 of 120

1

Identifying residual risk is MOST important to which of the following concepts?

Select one or more of the following:

  • Risk deterrence

  • Risk acceptance

  • Risk mitigation

  • Risk avoidance

Explanation

Question 105 of 120

1

The information security technician wants to ensure security controls are deployed and functioning as intended to be able to maintain an appropriate security posture. Which of the following security techniques is MOST appropriate to do this?

Select one or more of the following:

  • Log audits

  • System hardening

  • Use IPS/IDS

  • Continuous security monitoring

Explanation

Question 106 of 120

1

A small company can only afford to buy an all-in-one wireless router/switch. The company has 3 wireless BYOD users and 2 web servers without wireless access. Which of the following should the company configure to protect the servers from the user devices? (Select TWO).

Select one or more of the following:

  • Deny incoming connections to the outside router interface

  • Change the default HTTP port

  • Implement EAP-TLS to establish mutual authentication

  • Disable the physical switch ports

  • Create a server VLAN

  • Create an ACL to access the server

Explanation

Question 107 of 120

1

Users can authenticate to a company's web applications using their credentials from a popular social media site. Which of the following poses the greatest risk with this integration?

Select one or more of the following:

  • Malicious users can exploit local corporate credentials with their social media credentials

  • Changes to passwords on the social media site can be delayed from replicating to the company

  • Data loss from the corporate servers can create legal liabilities with the social media site

  • Password breaches to the social media site affect the company application as well

Explanation

Question 108 of 120

1

A security team has established a security awareness program. Which of the following would BEST prove the success of the program?

Select one or more of the following:

  • Policies

  • Procedures

  • Metrics

  • Standards

Explanation

Question 109 of 120

1

A company needs to receive data that contains personally identifiable information. The company requires both the transmission and data at rest to be encrypted. Which of the following achieves this goal? (Select TWO).

Select one or more of the following:

  • SSH

  • TFTP

  • NTLM

  • TKIP

  • SMTP

  • PGP/GPG

Explanation

Question 110 of 120

1

An organization does not have adequate resources to administer its large infrastructure. A security administrator wishes to combine the security controls of some of the network devices in the organization. Which of the following methods would BEST accomplish this goal?

Select one or more of the following:

  • Unified Threat Management

  • Virtual Private Network

  • Single sign on

  • Role-based management

Explanation

Question 111 of 120

1

Which of the following would allow the organization to divide a Class C IP address range into several ranges?

Select one or more of the following:

  • DMZ

  • Virtual LANs

  • NAT

  • Subnetting

Explanation

Question 112 of 120

1

The security administrator is currently unaware of an incident that occurred a week ago. Which of the following will ensure the administrator is notified in a timely manner in the future?

Select one or more of the following:

  • User permissions reviews

  • Incident response team

  • Change management

  • Routine auditing

Explanation

Question 113 of 120

1

An access point has been configured for AES encryption but a client is unable to connect to it. Which of the following should be configured on the client to fix this issue?

Select one or more of the following:

  • WEP

  • CCMP

  • TKIP

  • RC4

Explanation

Question 114 of 120

1

The system administrator is tasked with changing the administrator password across all 2000 computers in the organization. Which of the following should the system administrator implement to accomplish this task?

Select one or more of the following:

  • A security group

  • A group policy

  • Key escrow

  • Certificate revocation

Explanation

Question 115 of 120

1

A network administrator wants to block both DNS requests and zone transfers coming from outside IP addresses. The company uses a firewall which implements an implicit allow and is currently configured with the following ACL applied to its external interfacE.
PERMIT TCP ANY ANY 80
PERMIT TCP ANY ANY 443
Which of the following rules would accomplish this task? (Select TWO).

Select one or more of the following:

  • Change the firewall default settings so that it implements an implicit deny

  • Apply the current ACL to all interfaces of the firewall

  • Remove the current ACL

  • Add the following ACL at the top of the current ACLDENY TCP ANY ANY 53

  • Add the following ACL at the bottom of the current ACLDENY ICMP ANY ANY 53

  • Add the following ACL at the bottom of the current ACLDENY IP ANY ANY 53

Explanation

Question 116 of 120

1

Which of the following attacks would cause all mobile devices to lose their association with corporate access points while the attack is underway?

Select one or more of the following:

  • Wireless jamming

  • Evil twin

  • Rogue AP

  • Packet sniffing

Explanation

Question 117 of 120

1

An administrator wants to ensure that the reclaimed space of a hard drive has been sanitized while the computer is in use. Which of the following can be implemented?

Select one or more of the following:

  • Cluster tip wiping

  • Individual file encryption

  • Full disk encryption

  • Storage retention

Explanation

Question 118 of 120

1

A company is looking to improve their security posture by addressing risks uncovered by a recent penetration test. Which of the following risks is MOST likely to affect the business on a day-to-day basis?

Select one or more of the following:

  • Insufficient encryption methods

  • Large scale natural disasters

  • Corporate espionage

  • Lack of antivirus software

Explanation

Question 119 of 120

1

Ann, an employee, is cleaning out her desk and disposes of paperwork containing confidential customer information in a recycle bin without shredding it first. This is MOST likely to increase the risk of loss from which of the following attacks?

Select one or more of the following:

  • Shoulder surfing

  • Dumpster diving

  • Tailgating

  • Spoofing

Explanation

Question 120 of 120

1

After a number of highly publicized and embarrassing customer data leaks as a result of social engineering attacks by phone, the Chief Information Officer (CIO) has decided user training will reduce the risk of another data leak. Which of the following would be MOST effective in reducing data leaks in this situation?

Select one or more of the following:

  • Information Security Awareness

  • Social Media and BYOD

  • Data Handling and Disposal

  • Acceptable Use of IT Systems

Explanation

Previous
Next