Quiz
Ohne Titel
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (85)
1A recent audit has discovered that at the time of password expiration clients are able to recycle the
previous credentials for authentication. Which of the following controls should be used together to
prevent this from occurring? (Select TWO).- AA. Password age
- BB. Password hashing
- CC. Password complexity
- DD. Password history
- EE. Password length
2A system administrator is configuring UNIX accounts to authenticate against an external server.
The configuration file asks for the following information DC=ServerName and DC=COM. Which of
the following authentication services is being used?- AA. RADIUS
- BB. SAML
- CC. TACACS+
- DD. LDAP
3In Kerberos, the Ticket Granting Ticket (TGT) is used for which of the following?
- AA. Identification
- BB. Authorization
- CC. Authentication
- DD. Multifactor authentication
4Which of the following network design elements allows for many internal devices to share one
public IP address?- AA. DNAT
- BB. PAT
- CC. DNS
- DD. DMZ
5Which of the following components of an all-in-one security appliance would MOST likely be
configured in order to restrict access to peer-to-peer file sharing websites?- AA. Spam filter
- BB. URL filter
- CC. Content inspection
- DD. Malware inspection
6When considering a vendor-specific vulnerability in critical industrial control systems which of the
following techniques supports availability?- AA. Deploying identical application firewalls at the border
- BB. Incorporating diversity into redundant design
- CC. Enforcing application white lists on the support workstations
- DD. Ensuring the systems’ anti-virus definitions are up-to-date
7During the information gathering stage of a deploying role-based access control model, which of
the following information is MOST likely required?- AA. Conditional rules under which certain systems may be accessed
- BB. Matrix of job titles with required access privileges
- CC. Clearance levels of all company personnel
- DD. Normal hours of business operation
8The Chief Technical Officer (CTO) has been informed of a potential fraud committed by a
database administrator performing several other job functions within the company. Which of the
following is the BEST method to prevent such activities in the future?- AA. Job rotation
- BB. Separation of duties
- CC. Mandatory Vacations
- DD. Least Privilege
9Ann would like to forward some Personal Identifiable Information to her HR department by email,
but she is worried about the confidentiality of the information. Which of the following will
accomplish this task securely?- AA. Digital Signatures
- BB. Hashing
- CC. Secret Key
- DD. Encryption
10A company is trying to limit the risk associated with the use of unapproved USB devices to copy
documents. Which of the following would be the BEST technology control to use in this scenario?- AA. Content filtering
- BB. IDS
- CC. Audit logs
- DD. DLP
11A company is trying to implement physical deterrent controls to improve the overall security
posture of their data center. Which of the following BEST meets their goal?- AA. Visitor logs
- BB. Firewall
- CC. Hardware locks
- DD. Environmental monitoring
12A company’s employees were victims of a spear phishing campaign impersonating the CEO. The
company would now like to implement a solution to improve the overall security posture by
assuring their employees that email originated from the CEO. Which of the following controls could
they implement to BEST meet this goal?- AA. Spam filter
- BB. Digital signatures
- CC. Antivirus software
- DD. Digital certificates
13A security technician is attempting to improve the overall security posture of an internal mail
server. Which of the following actions would BEST accomplish this goal?- AA. Monitoring event logs daily
- BB. Disabling unnecessary services
- CC. Deploying a content filter on the network
- DD. Deploy an IDS on the network
14A bank has recently deployed mobile tablets to all loan officers for use at customer sites. Which of
the following would BEST prevent the disclosure of customer data in the event that a tablet is lost or stolen?- AA. Application control
- BB. Remote wiping
- CC. GPS
- DD. Screen-locks
15Which of the following is the primary security concern when deploying a mobile device on a
network?- AA. Strong authentication
- BB. Interoperability
- CC. Data security
- DD. Cloud storage technique
16Which of the following technical controls is BEST used to define which applications a user can
install and run on a company issued mobile device?- AA. Authentication
- BB. Blacklisting
- CC. Whitelisting
- DD. Acceptable use policy
17After a company has standardized to a single operating system, not all servers are immune to a
well-known OS vulnerability. Which of the following solutions would mitigate this issue?- AA. Host based firewall
- BB. Initial baseline configurations
- CC. Discretionary access control
- DD. Patch management system
18A security administrator discovers an image file that has several plain text documents hidden in
the file. Which of the following security goals is met by camouflaging data inside of other files?- AA. Integrity
- BB. Confidentiality
- CC. Steganography
- DD. Availability
19A company determines a need for additional protection from rogue devices plugging into physical
ports around the building. Which of the following provides the highest degree of protection from
unauthorized wired network access?- AA. Intrusion Prevention Systems
- BB. MAC filtering
- CC. Flood guards
- DD. 802.1x
20A company is preparing to decommission an offline, non-networked root certificate server. Before
sending the server’s drives to be destroyed by a contracted company, the Chief Security Officer
(CSO) wants to be certain that the data will not be accessed. Which of the following, if
implemented, would BEST reassure the CSO? (Select TWO).- AA. Disk hashing procedures
- BB. Full disk encryption
- CC. Data retention policies
- DD. Disk wiping procedures
- EE. Removable media encryption
21During the analysis of a PCAP file, a security analyst noticed several communications with a
remote server on port 53. Which of the following protocol types is observed in this traffic?- AA. FTP
- BB. DNS
- CC. Email
- DD. NetBIOS
22A compromised workstation utilized in a Distributed Denial of Service (DDOS) attack has been
removed from the network and an image of the hard drive has been created. However, the system
administrator stated that the system was left unattended for several hours before the image was
created. In the event of a court case, which of the following is likely to be an issue with this
incident?- AA. Eye Witness
- BB. Data Analysis of the hard drive
- CC. Chain of custody
- DD. Expert Witness
23During which of the following phases of the Incident Response process should a security
administrator define and implement general defense against malware?- AA. Lessons Learned
- BB. Preparation
- CC. Eradication
- DD. Identification
24Due to hardware limitation, a technician must implement a wireless encryption algorithm that uses
the RC4 protocol. Which of the following is a wireless encryption solution that the technician
should implement while ensuring the STRONGEST level of security?- AA. WPA2-AES
- BB. 802.11ac
- CC. WPA-TKIP
- DD. WEP
25Joe, a user, wants to send an encrypted email to Ann. Which of the following will Ann need to use
to verify that the email came from Joe and decrypt it? (Select TWO).- AA. The CA’s public key
- BB. Ann’s public key
- CC. Joe’s private key
- DD. Ann’s private key
- EE. The CA’s private key
- FF. Joe’s public key
26Joe, a user, wants to send an encrypted email to Ann. Which of the following will Ann need to use
to verify the validity’s of Joe’s certificate? (Select TWO).- AA. The CA’s public key
- BB. Joe’s private key
- CC. Ann’s public key
- DD. The CA’s private key
- EE. Joe’s public key
- FF. Ann’s private key
27A technician wants to implement a dual factor authentication system that will enable the
organization to authorize access to sensitive systems on a need-to-know basis. Which of the
following should be implemented during the authorization stage?- AA. Biometrics
- BB. Mandatory access control
- CC. Single sign-on
- DD. Role-based access control
28A security researcher wants to reverse engineer an executable file to determine if it is malicious. The file was found on an underused server and appears to contain a zero-day exploit. Which of the following can the researcher do to determine if the file is malicious in nature?
- AA. TCP/IP socket design review
- BB. Executable code review
- CC. OS Baseline comparison
- DD. Software architecture review
29A recent spike in virus detections has been attributed to end-users visiting www.compnay.com.
The business has an established relationship with an organization using the URL of
www.company.com but not with the site that has been causing the infections. Which of the
following would BEST describe this type of attack?- AA. Typo squatting
- BB. Session hijacking
- CC. Cross-site scripting
- DD. Spear phishing
30A company has proprietary mission critical devices connected to their network which are
configured remotely by both employees and approved customers. The administrator wants to
monitor device security without changing their baseline configuration. Which of the following
should be implemented to secure the devices without risking availability?- AA. Host-based firewall
- BB. IDS
- CC. IPS
- DD. Honeypot
31An administrator has a network subnet dedicated to a group of users. Due to concerns regarding
data and network security, the administrator desires to provide network access for this group only.
Which of the following would BEST address this desire?- AA. Install a proxy server between the users’ computers and the switch to filter inbound network
traffic. - BB. Block commonly used ports and forward them to higher and unused port numbers.
- CC. Configure the switch to allow only traffic from computers based upon their physical address.
- DD. Install host-based intrusion detection software to monitor incoming DHCP Discover requests.
- AA. Install a proxy server between the users’ computers and the switch to filter inbound network
32Which of the following is a security concern regarding users bringing personally-owned devices
that they connect to the corporate network?- AA. Cross-platform compatibility issues between personal devices and server-based applications
- BB. Lack of controls in place to ensure that the devices have the latest system patches and
signature files - CC. Non-corporate devices are more difficult to locate when a user is terminated
- DD. Non-purchased or leased equipment may cause failure during the audits of company-owned
assets
33Due to issues with building keys being duplicated and distributed, a security administrator wishes
to change to a different security control regarding a restricted area. The goal is to provide access
based upon facial recognition. Which of the following will address this requirement?- AA. Set up mantraps to avoid tailgating of approved users.
- BB. Place a guard at the entrance to approve access.
- CC. Install a fingerprint scanner at the entrance.
- DD. Implement proximity readers to scan users’ badges
34A security administrator has concerns regarding employees saving data on company provided
mobile devices. Which of the following would BEST address the administrator’s concerns?- AA. Install a mobile application that tracks read and write functions on the device.
- BB. Create a company policy prohibiting the use of mobile devices for personal use.
- CC. Enable GPS functionality to track the location of the mobile devices.
- DD. Configure the devices so that removable media use is disabled.
35Identifying residual risk is MOST important to which of the following concepts?
- AA. Risk deterrence
- BB. Risk acceptance
- CC. Risk mitigation
- DD. Risk avoidance
36The information security technician wants to ensure security controls are deployed and functioning
as intended to be able to maintain an appropriate security posture. Which of the following security
techniques is MOST appropriate to do this?- AA. Log audits
- BB. System hardening
- CC. Use IPS/IDS
- DD. Continuous security monitoring
37A small company can only afford to buy an all-in-one wireless router/switch. The company has 3
wireless BYOD users and 2 web servers without wireless access. Which of the following should
the company configure to protect the servers from the user devices? (Select TWO).- AA. Deny incoming connections to the outside router interface.
- BB. Change the default HTTP port
- CC. Implement EAP-TLS to establish mutual authentication
- DD. Disable the physical switch ports
- EE. Create a server VLAN
- FF. Create an ACL to access the server
38Users can authenticate to a company's web applications using their credentials from a popular
social media site. Which of the following poses the greatest risk with this integration?- AA. Malicious users can exploit local corporate credentials with their social media credentials
- BB. Changes to passwords on the social media site can be delayed from replicating to the company
- CC. Data loss from the corporate servers can create legal liabilities with the social media site
- DD. Password breaches to the social media site affect the company application as well
39A security team has established a security awareness program. Which of the following would
BEST prove the success of the program?- AA. Policies
- BB. Procedures
- CC. Metrics
- DD. Standards
40A company needs to receive data that contains personally identifiable information. The company
requires both the transmission and data at rest to be encrypted. Which of the following achieves
this goal? (Select TWO).- AA. SSH
- BB. TFTP
- CC. NTLM
- DD. TKIP
- EE. SMTP
- FF. PGP/GPG
41An organization does not have adequate resources to administer its large infrastructure. A security
administrator wishes to combine the security controls of some of the network devices in the
organization. Which of the following methods would BEST accomplish this goal?- AA. Unified Threat Management
- BB. Virtual Private Network
- CC. Single sign on
- DD. Role-based management
42Which of the following would allow the organization to divide a Class C IP address range into
several ranges?- AA. DMZ
- BB. Virtual LANs
- CC. NAT
- DD. Subnetting
43The security administrator is currently unaware of an incident that occurred a week ago. Which of
the following will ensure the administrator is notified in a timely manner in the future?- AA. User permissions reviews
- BB. Incident response team
- CC. Change management
- DD. Routine auditing
44An access point has been configured for AES encryption but a client is unable to connect to it.
Which of the following should be configured on the client to fix this issue?- AA. WEP
- BB. CCMP
- CC. TKIP
- DD. RC4
45The system administrator is tasked with changing the administrator password across all 2000
computers in the organization. Which of the following should the system administrator implement
to accomplish this task?- AA. A security group
- BB. A group policy
- CC. Key escrow
- DD. Certificate revocation
46A network administrator wants to block both DNS requests and zone transfers coming from
outside IP addresses. The company uses a firewall which implements an implicit allow and is
currently configured with the following ACL applied to its external interfacE.
PERMIT TCP ANY ANY 80
PERMIT TCP ANY ANY 443
Which of the following rules would accomplish this task? (Select TWO).- AA. Change the firewall default settings so that it implements an implicit deny
- BB. Apply the current ACL to all interfaces of the firewall
- CC. Remove the current ACL
- DD. Add the following ACL at the top of the current ACL
DENY TCP ANY ANY 53 - EE. Add the following ACL at the bottom of the current ACL
DENY ICMP ANY ANY 53 - FF. Add the following ACL at the bottom of the current ACL
DENY IP ANY ANY 53
47Which of the following attacks would cause all mobile devices to lose their association with corporate access points while the attack is underway?
- AA. Wireless jamming
- BB. Evil twin
- CC. Rogue AP
- DD. Packet sniffing
48An administrator wants to ensure that the reclaimed space of a hard drive has been sanitized while the computer is in use. Which of the following can be implemented?
- AA. Cluster tip wiping
- BB. Individual file encryption
- CC. Full disk encryption
- DD. Storage retention
49A company is looking to improve their security posture by addressing risks uncovered by a recent penetration test. Which of the following risks is MOST likely to affect the business on a day-to-day basis?
- AA. Insufficient encryption methods
- BB. Large scale natural disasters
- CC. Corporate espionage
- D D. Lack of antivirus software
50Ann, an employee, is cleaning out her desk and disposes of paperwork containing confidential customer information in a recycle bin without shredding it first. This is MOST likely to increase the risk of loss from which of the following attacks?
- AA. Shoulder surfing
- BB. Dumpster diving
- CC. Tailgating
- DD. Spoofing
51A recently installed application update caused a vital application to crash during the middle of the workday. The application remained down until a previous version could be reinstalled on the server, and this resulted in a significant loss of data and revenue.
Which of the following could BEST prevent this issue from occurring again?
- AA. Application configuration baselines
- BB. Application hardening
- CC. Application access controls
- DD. Application patch management
52A security administrator wishes to increase the security of the wireless network. Which of the following BEST addresses this concern?
- AA. Change the encryption from TKIP-based to CCMP-based
- BB. Set all nearby access points to operate on the same channel.
- CC. Configure the access point to use WEP instead of WPA2.
- DD. Enable all access points to broadcast their SSIDs.
53The system administrator has deployed updated security controls for the network to limit risk of attack. The security manager is concerned that controls continue to function as intended to maintain appropriate security posture.
Which of the following risk mitigation strategies is MOST important to the security manager?- AA. User permissions
- BB. Policy enforcement
- CC. Routine audits
- DD. Change management
54A company is about to release a very large patch to its customers. An administrator is required to test patch installations several times prior to distributing them to customer PCs.
Which of the following should the administrator use to test the patching process quickly and often?- AA. Create an incremental backup of an unpatched PC
- B B. Create an image of a patched PC and replicate it to servers
- CC. Create a full disk image to restore after each installation
- DD. Create a virtualized sandbox and utilize snapshots
55An auditing team has found that passwords do not meet best business practices. Which of the following will MOST increase the security of the passwords? (Select TWO).
- AA. Password Complexity
- BB. Password Expiration
- C C. Password Age
- DD. Password Length
- EE. Password History
56A vulnerability scan is reporting that patches are missing on a server. After a review, it is determined that the application requiring the patch does not exist on the operating system.
Which of the following describes this cause?
- AA. Application hardening
- BB. False positive
- CC. Baseline code review
- DD. False negative
57Company A submitted a bid on a contract to do work for Company B via email. Company B was insistent that the bid did not come from Company A. Which of the following would have assured that the bid was submitted by Company A?
- AA. Steganography
- BB. Hashing
- CC. Encryption
- D D. Digital Signatures
58Ann, a sales manager, successfully connected her company-issued smartphone to the wireless network in her office without supplying a username/password combination. Upon disconnecting from the wireless network, she attempted to connect her personal tablet computer to the same wireless network and could not connect.
Which of the following is MOST likely the reason?- AA. The company wireless is using a MAC filter
- B B. The company wireless has SSID broadcast disabled.
- CC. The company wireless is using WEP.
- DD. The company wireless is using WPA2.
59A network technician is on the phone with the system administration team. Power to the server room was lost and servers need to be restarted. The DNS services must be the first to be restarted. Several machines are powered off. Assuming each server only provides one service, which of the following should be powered on FIRST to establish DNS services?
- AA. Bind server
- BB. Apache server
- CC. Exchange server
- DD. RADIUS server
60A security administrator is reviewing the company’s continuity plan. The plan specifies an RTO of six hours and RPO of two days. Which of the following is the plan describing?
- AA. Systems should be restored within six hours and no later than two days after the incident.
- BB. Systems should be restored within two days and should remain operational for at least six hours.
- CC. Systems should be restored within six hours with a minimum of two days worth of data.
- D D. Systems should be restored within two days with a minimum of six hours worth of data
61 The incident response team has received the following email messagE.
From: monitor@ext-company.com
To: security@company.com
Subject: Copyright infringement
A copyright infringement alert was triggered by IP address 13.10.66.5 at 09: 50: 01 GMT.
After reviewing the following web logs for IP 13.10.66.5, the team is unable to correlate and identify the incident.
09: 45: 33 13.10.66.5 http: //remote.site.com/login.asp?user=john
09: 50: 22 13.10.66.5 http: //remote.site.com/logout.asp?user=anne
10: 50: 01 13.10.66.5 http: //remote.site.com/access.asp?file=movie.mov
11: 02: 45 13.10.65.5 http: //remote.site.com/download.asp?movie.mov=ok
Which of the following is the MOST likely reason why the incident response team is unable to identify and correlate the incident?- AA. The logs are corrupt and no longer forensically sound.
- BB. Traffic logs for the incident are unavailable.
- CC. Chain of custody was not properly maintained.
- DD. Incident time offsets were not accounted for.
62A server dedicated to the storage and processing of sensitive information was compromised with a rootkit and sensitive data was exfiltrated. Which of the following incident response procedures is best suited to restore the server?
- AA. Wipe the storage, reinstall the OS from original media and restore the data from the last known good backup.
- BB. Keep the data partition, restore the OS from the most current backup and run a full system antivirus scan.
- CC. Format the storage and reinstall both the OS and the data from the most current backup.
- DD. Erase the storage, reinstall the OS from most current backup and only restore the data that was not compromised.
63 Which of the following describes a type of malware which is difficult to reverse engineer in a virtual lab?
- AA. Armored virus
- BB. Polymorphic malware
- CC. Logic bomb
- DD. Rootkit
64Using a heuristic system to detect an anomaly in a computer’s baseline, a system administrator was able to detect an attack even though the company signature based IDS and antivirus did not detect it. Further analysis revealed that the attacker had downloaded an executable file onto the company PC from the USB port, and executed it to trigger a privilege escalation flaw.
Which of the following attacks has MOST likely occurred?- AA. Cookie stealing
- BB. Zero-day
- CC. Directory traversal
- DD. XML injection
65After copying a sensitive document from his desktop to a flash drive, Joe, a user, realizes that the document is no longer encrypted. Which of the following can a security technician implement to ensure that documents stored on Joe’s desktop remain encrypted when moved to external media or other network based storage?
- AA. Whole disk encryption
- BB. Removable disk encryption
- C C. Database record level encryption
- DD. File level encryption
66A security administrator must implement a system to allow clients to securely negotiate encryption keys with the company’s server over a public unencrypted communication channel.
Which of the following implements the required secure key negotiation? (Select TWO).- AA. PBKDF2
- BB. Symmetric encryption
- CC. Steganography
- D D. ECDHE
- EE. Diffie-Hellman
67Acme Corp has selectively outsourced proprietary business processes to ABC Services. Due to some technical issues, ABC services wants to send some of Acme Corp’s debug data to a third party vendor for problem resolution.
Which of the following MUST be considered prior to sending data to a third party?- AA. The data should be encrypted prior to transport
- B B. This would not constitute unauthorized data sharing
- C C. This may violate data ownership and non-disclosure agreements
- DD. Acme Corp should send the data to ABC Services’ vendor instead
68An organization has introduced token-based authentication to system administrators due to risk of password compromise. The tokens have a set of numbers that automatically change every 30 seconds. Which of the following type of authentication mechanism is this?
- AA. TOTP
- BB. Smart card
- CC. CHAP
- DD. HOTP
69A security technician at a small business is worried about the Layer 2 switches in the network suffering from a DoS style attack caused by staff incorrectly cabling network connections between switches.
Which of the following will BEST mitigate the risk if implemented on the switches?- AA. Spanning tree
- BB. Flood guards
- CC. Access control lists
- DD. Syn flood
70An administrator wants to establish a WiFi network using a high gain directional antenna with a narrow radiation pattern to connect two buildings separated by a very long distance. Which of the following antennas would be BEST for this situation?
- AA. Dipole
- BB. Yagi
- C C. Sector
- D D. Omni
71An attacker used an undocumented and unknown application exploit to gain access to a file server. Which of the following BEST describes this type of attack?
- AA. Integer overflow
- B B. Cross-site scripting
- C C. Zero-day
- DD. Session hijacking
- EE. XML injection
72Which of the following is an XML based open standard used in the exchange of authentication and authorization information between different parties?
- AA. LDAP
- BB. SAML
- CC. TACACS+
- DD. Kerberos
73Which of the following ports and protocol types must be opened on a host with a host-based firewall to allow incoming SFTP connections?
- AA. 21/UDP
- BB. 21/TCP
- CC. 22/UDP
- DD. 22/TCP
74A user, Ann, is reporting to the company IT support group that her workstation screen is blank other than a window with a message requesting payment or else her hard drive will be formatted. Which of the following types of malware is on Ann’s workstation?
- AA. Trojan
- BB. Spyware
- C C. Adware
- D D. Ransomware
75Which of the following controls can be implemented together to prevent data loss in the event of theft of a mobile device storing sensitive information? (Select TWO).
- AA. Full device encryption
- BB. Screen locks
- CC. GPS
- D D. Asset tracking
- E E. Inventory control
76A way to assure data at-rest is secure even in the event of loss or theft is to use:
- AA. Full device encryption.
- BB. Special permissions on the file system.
- CC. Trusted Platform Module integration.
- DD. Access Control Lists.
77A security audit identifies a number of large email messages being sent by a specific user from their company email account to another address external to the company. These messages were sent prior to a company data breach, which prompted the security audit. The user was one of a few people who had access to the leaked data. Review of the suspect’s emails show they consist mostly of pictures of the user at various locations during a recent vacation. No suspicious activities from other users who have access to the data were discovered.
Which of the following is occurring?- AA. The user is encrypting the data in the outgoing messages.
- B B. The user is using steganography.
- CC. The user is spamming to obfuscate the activity.
- DD. The user is using hashing to embed data in the emails.
78A security analyst is reviewing firewall logs while investigating a compromised web server. The following ports appear in the log:
22, 25, 445, 1433, 3128, 3389, 6667
Which of the following protocols was used to access the server remotely?- AA. LDAP
- B B. HTTP
- CC. RDP
- DD. HTTPS
79An organization does not want the wireless network name to be easily discovered. Which of the following software features should be configured on the access points?
- AA. SSID broadcast
- BB. MAC filter
- C C. WPA2
- DD. Antenna placement
80A computer is suspected of being compromised by malware. The security analyst examines the computer and finds that a service called Telnet is running and connecting to an external website over port 443. This Telnet service was found by comparing the system's services to the list of standard services on the company's system image. This review process depends on:
- AA. MAC filtering.
- BB. System hardening.
- CC. Rogue machine detection.
- DD. Baselining
81A software developer wants to prevent stored passwords from being easily decrypted. When the password is stored by the application, additional text is added to each password before the password is hashed. This technique is known as:
- AA. Symmetric cryptography.
- BB. Private key cryptography.
- C C. Salting.
- D D. Rainbow tables
82 In which of the following steps of incident response does a team analyze the incident and determine steps to prevent a future occurrence?
- AA. Mitigation
- BB. Identification
- C C. Preparation
- D D. Lessons learned
83A security technician has been asked to recommend an authentication mechanism that will allow users to authenticate using a password that will only be valid for a predefined time interval. Which of the following should the security technician recommend?
- AA. CHAP
- B B. TOTP
- C C. HOTP
- DD. PAP
84A security administrator must implement a wireless encryption system to secure mobile devices’ communication. Some users have mobile devices which only support 56-bit encryption. Which of the following wireless encryption methods should be implemented?
- AA. RC4
- BB. AES
- CC. MD5
- DD. TKIP
85After a security incident involving a physical asset, which of the following should be done at the beginning?
- AA. Record every person who was in possession of assets, continuing post-incident.
- BB. Create working images of data in the following order: hard drive then RAM.
- CC. Back up storage devices so work can be performed on the devices immediately.
- D D. Write a report detailing the incident and mitigation suggestions.
Informationen
- Beschreibung
- Quiz am Ohne Titel, erstellt von rita3308 am 28/12/2014.
- Autor
- rita3308
- Sprache
- English
- Aufrufe
- 8
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz