Test
Security 3rd
Crea una cuenta gratis para terminar este test
Guarda tu progreso y consulta tu resultado final.
¿Ya tienes cuenta? Inicia sesión
Preguntas del test (90)
1During a routine audit, it is discovered that someone has been using a stale administrator account to log into a seldom used server. The person has been using the server to view inappropriate websites that are prohibited to end users.
Which of the following could best prevent this from occurring again?- ACredential management
- BGroup policy management
- CAcceptable use policy
- DAccount expiration policy
2Which of the following should identify critical systems and components?
- AMOU
- BBPA
- CITCP
- DBCP
3Which of the following works by implanting software on systems but delays execution until a specific set of conditions is met?
- ALogic bomb
- BTrojan
- CScareware
- DRansomware
4A web application is configured to target browsers and allow access to bank accounts to siphon money to a foreign account.
This is an example of which of the following attacks?- ASQL injection
- BHeader manipulation
- CCross-site scripting
- DFlash cookie exploitation
5Technicians working with servers hosted at the company's datacenter are increasingly complaining of electric shocks when touching metal items which have been linked to hard drive failures.
Which of the following should be implemented to correct this issue?- ADecrease the room temperature
- BIncrease humidity in the room
- CUtilize better hot/cold aisle configurations
- DImplement EMI shielding
6A portable data storage device has been determined to have malicious firmware.
Which of the following is the BEST course of action to ensure data confidentiality?- AFormat the device
- BRe-image the device
- CPerform virus scan in the device
- DPhysically destroy the device
7A security administrator must implement a system to ensure that invalid certificates are not used by a custom developed application. The system must be able to check the validity of certificates even when internet access is unavailable.
Which of the following MUST be implemented to support this requirement?- ACSR
- BOCSP
- CCRL
- DSSH
8A technician has installed new vulnerability scanner software on a server that is joined to the company domain. The vulnerability scanner is able to provide visibility over the patch posture of all company's clients.
Which of the following is being used?- AGray box vulnerability testing
- BPassive scan
- CCredentialed scan
- DBypassing security controls
9While reviewing the monthly internet usage it is noted that there is a large spike in traffic classified as "unknown" and does not appear to be within the bounds of the organizations Acceptable Use
Policy.
Which of the following tool or technology would work BEST for obtaining more information on this traffic?- AFirewall logs
- BIDS logs
- CIncreased spam filtering
- DProtocol analyzer
10A network administrator wants to ensure that users do not connect any unauthorized devices to the company network. Each desk needs to connect a VoIP phone and computer.
Which of the following is the BEST way to accomplish this?- AEnforce authentication for network devices
- BConfigure the phones on one VLAN, and computers on another
- CEnable and configure port channels
- DMake users sign an Acceptable use Agreement
11An administrator has concerns regarding the traveling sales team who works primarily from smart phones.
Given the sensitive nature of their work, which of the following would BEST prevent access to the data in case of loss or theft?- AEnable screensaver locks when the phones are not in use to prevent unauthorized access
- BConfigure the smart phones so that the stored data can be destroyed from a centralized location
- CConfigure the smart phones so that all data is saved to removable media and kept separate from the device
- DEnable GPS tracking on all smart phones so that they can be quickly located and recovered
12A user of the wireless network is unable to gain access to the network. The symptoms are:
1.) Unable to connect to both internal and Internet resources
2.) The wireless icon shows connectivity but has no network access
The wireless network is WPA2 Enterprise and users must be a member of the wireless security group to authenticate.
Which of the following is the MOST likely cause of the connectivity issues?- AThe wireless signal is not strong enough
- BA remote DDoS attack against the RADIUS server is taking place
- CThe user's laptop only supports WPA and WEP
- DThe DHCP scope is full
- EThe dynamic encryption key did not update while the user was offline
13A chief Financial Officer (CFO) has asked the Chief Information Officer (CISO) to provide responses to a recent audit report detailing deficiencies in the organization security controls. The
CFO would like to know ways in which the organization can improve its authorization controls.
Given the request by the CFO, which of the following controls should the CISO focus on in the report? (Select Three)- APassword complexity policies
- BHardware tokens
- CBiometric systems
- DRole-based permissions
- EOne time passwords
- FSeparation of duties
- GMultifactor authentication
- HSingle sign-on
- ILeast privilege
14A mobile device user is concerned about geographic positioning information being included in messages sent between users on a popular social network platform. The user turns off the functionality in the application, but wants to ensure the application cannot re-enable the setting without the knowledge of the user.
Which of the following mobile device capabilities should the user disable to achieve the stated goal?- ADevice access control
- BLocation based services
- CApplication control
- DGEO-Tagging
15A member of a digital forensics team, Joe arrives at a crime scene and is preparing to collect system data. Before powering the system off, Joe knows that he must collect the most volatile date first.
Which of the following is the correct order in which Joe should collect the data?- ACPU cache, paging/swap files, RAM, remote logging data
- BRAM, CPU cache. Remote logging data, paging/swap files
- CPaging/swap files, CPU cache, RAM, remote logging data
- DCPU cache, RAM, paging/swap files, remote logging data
16An organization has hired a penetration tester to test the security of its ten web servers. The penetration tester is able to gain root/administrative access in several servers by exploiting vulnerabilities associated with the implementation of SMTP, POP, DNS, FTP, Telnet, and IMAP.
Which of the following recommendations should the penetration tester provide to the organization to better protect their web servers in the future?- AUse a honeypot
- BDisable unnecessary services
- CImplement transport layer security
- DIncrease application event logging
17A security engineer is faced with competing requirements from the networking group and database administrators. The database administrators would like ten application servers on the same subnet for ease of administration, whereas the networking group would like to segment all applications from one another.
Which of the following should the security administrator do to rectify this issue?- ARecommend performing a security assessment on each application, and only segment the applications with the most vulnerability
- BRecommend classifying each application into like security groups and segmenting the groups from one another
- CRecommend segmenting each application, as it is the most secure approach
- DRecommend that only applications with minimal security features should be segmented to protect them
18A security analyst has been asked to perform a review of an organization's software development lifecycle. The analyst reports that the lifecycle does not contain a phase in which team members evaluate and provide critical feedback of another developer's code.
Which of the following assessment techniques is BEST described in the analyst's report?- AArchitecture evaluation
- BBaseline reporting
- CWhitebox testing
- DPeer review
19An attacker wearing a building maintenance uniform approached a company's receptionist asking for access to a secure area. The receptionist asks for identification, a building access badge and checks the company's list approved maintenance personnel prior to granting physical access to the secure are.
The controls used by the receptionist are in place to prevent which of the following types of attacks?- ATailgating
- BShoulder Surfing
- CImpersonation
- DHoax
20A security administrator is tasked with conducting an assessment made to establish the baseline security posture of the corporate IT infrastructure. The assessment must report actual flaws and weaknesses in the infrastructure. Due to the expense of hiring outside consultants, the testing must be performed using in-house or cheaply available resource. There cannot be a possibility of any requirement being damaged in the test.
Which of the following has the administrator been tasked to perform?- ARisk transference
- BPenetration test
- CThreat assessment
- DVulnerability assessment
21A network administrator is attempting to troubleshoot an issue regarding certificates on a secure website. During the troubleshooting process, the network administrator notices that the web gateway proxy on the local network has signed all of the certificates on the local machine.
Which of the following describes the type of attack the proxy has been legitimately programmed to perform?- ATransitive access
- BSpoofing
- CMan-in-the-middle
- DReplay
22Which of the following use the SSH protocol? pick two
- AStelnet
- BSCP
- CSNMP
- DFTPS
- ESSL
- FSFTP
23Which of the following is the GREATEST risk to a company by allowing employees to physically bring their personal smartphones to work?
- ATaking pictures of proprietary information and equipment in restricted areas.
- BInstalling soft token software to connect to the company's wireless network
- CCompany cannot automate patch management on personally-owned devices.
- DIncreases the attack surface by having more target devices on the company's campus
24Which of the following is the summary of loss for a given year?
- AMTBF
- BALE
- CSLA
- DARO
25A Security Officer on a military base needs to encrypt several smart phones that will be going into the field.
Which of the following encryption solutions should be deployed in this situation?- AElliptic curve
- BOne-time pad
- C3DES
- DAES-256
26An organization relies heavily on an application that has a high frequency of security updates. At present, the security team only updates the application on the first Monday of each month, even though the security updates are released as often as twice a week.
Which of the following would be the BEST method of updating this application?- AConfigure testing and automate patch management for the application.
- BConfigure security control testing for the application.
- CManually apply updates for the application when they are released.
- DConfigure a sandbox for testing patches before the scheduled monthly update.
27A technician must configure a firewall to block external DNS traffic from entering a network.
Which of the following ports should they block on the firewall?- A53
- B110
- C143
- D443
28A software development company needs to share information between two remote servers, using encryption to protect it. A programmer suggests developing a new encryption protocol, arguing that using an unknown protocol with secure, existing cryptographic algorithm libraries will provide strong encryption without being susceptible to attacks on other known protocols.
Which of the following summarizes the BEST response to the programmer's proposal?- AThe newly developed protocol will only be as secure as the underlying cryptographic algorithms used.
- BNew protocols often introduce unexpected vulnerabilities, even when developed with otherwise secure and tested algorithm libraries.
- CA programmer should have specialized training in protocol development before attempting to design a new encryption protocol.
- DThe obscurity value of unproven protocols against attacks often outweighs the potential for introducing new vulnerabilities.
29A security technician would like to obscure sensitive data within a file so that it can be transferred without causing suspicion.
Which of the following technologies would BEST be suited to accomplish this?- ATransport Encryption
- BStream Encryption
- CDigital Signature
- DSteganography
30A supervisor in your organization was demoted on Friday afternoon. The supervisor had the ability to modify the contents of a confidential database, as well as other managerial permissions. On Monday morning, the database administrator reported that log files indicated that several records were missing from the database.
Which of the following risk mitigation strategies should have been implemented when the supervisor was demoted?- AIncident management
- BRoutine auditing
- CIT governance
- DMonthly user rights reviews
31Which of the following attack types is being carried out where a target is being sent unsolicited messages via Bluetooth?
- AWar chalking
- BBluejacking
- CBluesnarfing
- DRogue tethering
32Joe is exchanging encrypted email with another party. Joe encrypts the initial email with a key. When Joe receives a response, he is unable to decrypt the response with the same key he used initially.
Which of the following would explain the situation?- AAn ephemeral key was used for one of the messages
- BA stream cipher was used for the initial email; a block cipher was used for the reply
- COut-of-band key exchange has taken place
- DAsymmetric encryption is being used
33Recently several employees were victims of a phishing email that appeared to originate from the company president. The email claimed the employees would be disciplined if they did not click on a malicious link in the message.
Which of the following principles of social engineering made this attack successful?- AAuthority
- BSpamming
- CSocial proof
- DScaricity
34Which of the following is the LEAST secure hashing algorithm?
- ASHA1
- BRIPEMD
- CMD5
- DDES
35An employee uses RDP to connect back to the office network.
If RDP is misconfigured, which of the following security exposures would this lead to?- AA virus on the administrator's desktop would be able to sniff the administrator's username and password.
- BResult in an attacker being able to phish the employee's username and password.
- CA social engineering attack could occur, resulting in the employee's password being extracted.
- DA man in the middle attack could occur, resulting the employee's username and password being captured.
36Joe, the security administrator, sees this in a vulnerability scan report:
"The server 10.1.2.232 is running Apache 2.2.20 which may be vulnerable to a mod_cgi exploit.”
Joe verifies that the mod_cgi module is not enabled on 10.1.2.232. This message is an example of:- Aa threat
- Ba risk
- Ca false negative
- Da false positive
37A security analyst wishes to increase the security of an FTP server. Currently, all trails to the FTP server is unencrypted. Users connecting to the FTP server use a variety of modem FTP client software. The security analyst wants to keep the same port and protocol, while also still allowing unencrypted connections.
Which of the following would BEST accomplish these goals?- ARequire the SFTP protocol to connect to the file server.
- BUse implicit TLS on the FTP server.
- CUse explicit FTPS for the connections.
- DUse SSH tunneling to encrypt the FTP traffic.
38The Chief Technology Officer (CTO) of a company, Ann, is putting together a hardware budget for the next 10 years. She is asking for the average lifespan of each hardware device so that she is able to calculate when she will have to replace each device.
Which of the following categories BEST describes what she is looking for?- AALE
- BMTTR
- CMTBF
- DMTTF
39A software developer wants to ensure that the application is verifying that a key is valid before establishing SSL connections with random remote hosts on the Internet.
Which of the following should be used in the code? (Select TWO.)- AEscrowed keys
- BSSL symmetric encryption key
- CSoftware code private key
- DRemote server public key
- EOCSP
40A security guard has informed the Chief Information Security Officer that a person with a tablet has been walking around the building. The guard also noticed strange white markings in different areas of the parking lot.
The person is attempting which of the following types of attacks?- AJamming
- BWar Chalking
- CPacket Sniffing
- DNear Field Communication
41A system administrator is configuring a site-to-site VPN tunnel.
Which of the following should be configured on the VPN concentrator during the IKE phase?- ARIPEMD
- BECDHE
- CDiffie-Hellman
- DHTTPS
42A network operations manager has added a second row of server racks in the datacenter. These racks face the opposite direction of the first row of racks.
Which of the following is the reason the manager installed the racks this way?- ATo lower energy consumption by sharing power outlets
- BTo create environmental hot and cold isles
- CTo eliminate the potential for electromagnetic interference
- DTo maximize fire suppression capabilities
43Phishing emails frequently take advantage of high-profile catastrophes reported in the news.
Which of the following principles BEST describes the weakness being exploited?- AIntimidation
- BScarcity
- CAuthority
- DSocial proof
44New magnetic locks were ordered for an entire building. In accordance with company policy, employee safety is the top priority.
In case of a fire where electricity is cut, which of the following should be taken into consideration when installing the new locks?- AFail safe
- BFault tolerance
- CFail secure
- DRedundancy
45Anne, the Chief Executive Officer (CEO), has reported that she is getting multiple telephone calls from someone claiming to be from the helpdesk. The caller is asking to verify her network authentication credentials because her computer is broadcasting across the network.
This is MOST likely which of the following types of attacks?- AVishing
- BImpersonation
- CSpim
- DScareware
46An administrator discovers the following log entry on a server:
Nov 12 2013 00:23:45 httpd[2342]: GET
/app2/prod/proc/process.php?input=change;cd%20../../../etc;cat%20shadow
Which of the following attacks is being attempted?- ACommand injection
- BPassword attack
- CBuffer overflow
- DCross-site scripting
47A security team wants to establish an Incident Response plan. The team has never experienced an incident.
Which of the following would BEST help them establish plans and procedures?- ATable top exercises
- BLessons learned
- CEscalation procedures
- DRecovery procedures
48Which of the following would verify that a threat does exist and security controls can easily be bypassed without actively testing an application?
- AProtocol analyzer
- BVulnerability scan
- CPenetration test
- DPort scanner
49Which of the following technologies would be MOST appropriate to utilize when testing a new software patch before a company-wide deployment?
- ACloud computing
- BVirtualization
- CRedundancy
- DApplication Control
50A system administrator needs to implement 802.1x whereby when a user logs into the network, the authentication server communicates to the network switch and assigns the user to the proper
VLAN.- ARADIUS
- BKerberos
- CLDAP
- DMSCHAP
51Which of the following types of cloud Infrastructures would allow several organizations with similar structures and interests to realize shared storage and resources?
- APrivate
- BHybrid
- CPublic
- DCommunity
52A security administrator receives notice that a third-party certificate authority has been compromised, and new certificates will need to be issued.
Which of the following should the administrator submit to receive a new certificate?- ACRL
- BOSCP
- CPFX
- DCSR
- ECA
53A company wants to host a publicly available server that performs the following functions:
Evaluates MX record lookup
Can perform authenticated requests for A and AAA records Uses RRSIG
Which of the following should the company use to fulfill the above requirements?- ADNSSEC
- BSFTP
- Cnslookup
- Ddig
54A company has a data classification system with definitions for "Private" and public." The company's security policy outlines how data should be protected based on type. The company recently added the data type "Proprietary".
Which of the following is the MOST likely reason the company added this data type?- AReduced cost
- BMore searchable data
- CBetter data classification
- DExpanded authority of the privacy officer
55A security administrator is developing training for corporate users on basic security principles for personal email accounts.
Which of the following should be mentioned as the MOST secure way for password recovery?- AUtilizing a single Qfor password recovery
- BSending a PIN to a smartphone through text message
- CUtilizing CAPTCHA to avoid brute force attacks
- DUse a different e-mail address to recover password
56A company researched the root cause of a recent vulnerability in its software. It was determined that the vulnerability was the result of two updates made in the last release. Each update alone would not have resulted in the vulnerability.
In order to prevent similar situations in the future, the company should improve which of the following?- AChange management procedures
- BJob rotation policies
- CIncident response management
- DLeast privilege access controls
57A computer on a company network was infected with a zero-day exploit after an employee accidently opened an email that contained malicious content. The employee recognized the email as malicious and was attempting to delete it, but accidently opened it.
Which of the following should be done to prevent this scenario from occurring again in the future?- AInstall host-based firewalls on all computers that have an email client installed
- BSet the email program default to open messages in plain text
- CInstall end-point protection on all computers that access web email
- DCreate new email spam filters to delete all messages from that sender
58A company wants to ensure that the validity of publicly trusted certificates used by its web server can be determined even during an extended internet outage.
Which of the following should be implemented?- ARecovery agent
- BOCSP
- CCRL
- DKey escrow
59An administrator intends to configure an IPSec solution that provides ESP with integrity protection, but not confidentiality protection.
Which of the following AES modes of operation would meet this integrity-only requirement?- AHMAC
- BPCBC
- CCBC
- DGCM
- ECFB
60The chief security officer (CS0) has issued a new policy that requires that all internal websites be configured for HTTPS traffic only. The network administrator has been tasked to update all internal sites without incurring additional costs.
Which of the following is the best solution for the network administrator to secure each internal website?- AUse certificates signed by the company CA
- BUse a signing certificate as a wild card certificate
- CUse certificates signed by a public ca
- DUse a self-signed certificate on each internal serve
61A security program manager wants to actively test the security posture of a system. The system is not yet in production and has no uptime requirement or active user base.
Which of the following methods will produce a report which shows vulnerabilities that were actually exploited?- APeer Review
- BComponent testing
- CPenetration testing
- DVulnerability testing
62A new intern in the purchasing department requires read access to shared documents.
Permissions are normally controlled through a group called "Purchasing", however, the purchasing group permissions allow write access.
Which of the following would be the BEST course of action?- AModify all the shared files with read only permissions for the intern.
- BCreate a new group that has only read permissions for the files.
- CRemove all permissions for the shared files
- DAdd the intern to the "Purchasing" group.
63A business has recently deployed laptops to all sales employees. The laptops will be used primarily from home offices and while traveling, and a high amount of wireless mobile use is expected.
To protect the laptops while connected to untrusted wireless networks, which of the following would be the BEST method for reducing the risk of having the laptops compromised?- AMAC filtering
- BVirtualization
- COS hardening
- DApplication white-listing
64Which of the fallowing security controls does an iris scanner provide?
- ALogical
- BAdministrative
- CCorrective
- DPhysical
- EDetective
- FDeterrent
65During a data breach cleanup, it is discovered that not all of the sites involved have the necessary data wiping tools. The necessary tools are quickly distributed to the required technicians, but when should this problem BEST be revisited?
- AReporting
- BPreparation
- CMitigation
- DLessons Learned
66Joe, a technician, is working remotely with his company provided laptop at the coffee shop near his home. Joe is concerned that another patron of the coffee shop may be trying to access his laptop.
Which of the following is an appropriate control to use to prevent the other patron from accessing
Joe's laptop directly?- Afull-disk encryption
- BHost-based firewall
- CCurrent antivirus definitions
- DLatest OS updates
67An attacker uses a network sniffer to capture the packets of a transaction that adds $20 to a gift card. The attacker then user a function of the sniffer to push those packets back onto the network again, adding another $20 to the gift card. This can be done many times.
Which of the following describes this type of attack?- AInteger overflow attack
- BSmurf attack
- CReplay attack
- DBuffer overflow attack
- ECross-site scripting attack
68An organization is moving its human resources system to a cloud services provider.
The company plans to continue using internal usernames and passwords with the service provider, but the security manager does not want the service provider to have a company of the passwords.
Which of the following options meets all of these requirements?- ATwo-factor authentication
- BAccount and password synchronization
- CSmartcards with PINS
- DFederated authentication
69The data backup window has expanded into the morning hours and has begun to affect production users. The main bottleneck in the process is the time it takes to replicate the backups to separate severs at the offsite data center.
Which of the following uses of deduplication could be implemented to reduce the backup window?- AImplement deduplication at the network level between the two locations
- BImplement deduplication on the storage array to reduce the amount of drive space needed
- CImplement deduplication on the server storage to reduce the data backed up
- DImplement deduplication on both the local and remote servers
70A penetration testing is preparing for a client engagement in which the tester must provide data that proves and validates the scanning tools' results.
Which of the following is the best method for collecting this information?- ASet up the scanning system's firewall to permit and log all outbound connections
- BUse a protocol analyzer to log all pertinent network traffic
- CConfigure network flow data logging on all scanning system
- DEnable debug level logging on the scanning system and all scanning tools used.
71Which of the following best describes the initial processing phase used in mobile device forensics?
- AThe phone should be powered down and the battery removed to preserve the state of data on any internal or removable storage utilized by the mobile device
- BThe removable data storage cards should be processed first to prevent data alteration when examining the mobile device
- CThe mobile device should be examined first, then removable storage and lastly the phone without removable storage should be examined again
- DThe phone and storage cards should be examined as a complete unit after examining the removable storage cards separately.
72Ann a security analyst is monitoring the IDS console and noticed multiple connections from an internal host to a suspicious call back domain.
Which of the following tools would aid her to decipher the network traffic?- AVulnerability Scanner
- BNMAP
- CNETSTAT
- DPacket Analyzer
73An administrator is testing the collision resistance of different hashing algorithms.
Which of the following is the strongest collision resistance test?- AFind two identical messages with different hashes
- BFind two identical messages with the same hash
- CFind a common has between two specific messages
- DFind a common hash between a specific message and a random message
74The SSID broadcast for a wireless router has been disabled but a network administrator notices that unauthorized users are accessing the wireless network. The administer has determined that attackers are still able to detect the presence of the wireless network despite the fact the SSID has been disabled.
Which of the following would further obscure the presence of the wireless network?- AUpgrade the encryption to WPA or WPA2
- BCreate a non-zero length SSID for the wireless router
- CReroute wireless users to a honeypot
- DDisable responses to a broadcast probe request
75Which of the following should be used to implement voice encryption?
- ASSLv3
- BVDSL
- CSRTP
- DVoIP
76During an application design, the development team specifics a LDAP module for single sign-on communication with the company's access control database.
This is an example of which of the following?- AApplication control
- BData in-transit
- CIdentification
- DAuthentication
77After a merger, it was determined that several individuals could perform the tasks of a network administrator in the merged organization. Which of the following should have been performed to ensure that employees have proper access?
- ATime-of-day restrictions
- BChange management
- CPeriodic auditing of user credentials
- DUser rights and permission review
78A company exchanges information with a business partner. An annual audit of the business partner is conducted against the SLA in order to verify:
- APerformance and service delivery metrics
- BBackups are being performed and tested
- CData ownership is being maintained and audited
- DRisk awareness is being adhered to and enforced
79Which of the following is the proper way to quantify the total monetary damage resulting from an exploited vulnerability?
- ACalculate the ALE
- BCalculate the ARO
- CCalculate the MTBF
- DCalculate the TCO
80A security administrator needs to implement a system that detects possible intrusions based upon a vendor provided list.
Which of the following BEST describes this type of IDS?- ASignature based
- BHeuristic
- CAnomaly-based
- DBehavior-based
81The chief Security Officer (CSO) has reported a rise in data loss but no break ins have occurred.
By doing which of the following is the CSO most likely to reduce the number of incidents?- AImplement protected distribution
- BEmpty additional firewalls
- CConduct security awareness training
- DInstall perimeter barricades
82Having adequate lighting on the outside of a building is an example of which of the following security controls?
- ADeterrent
- BCompensating
- CDetective
- DPreventative
83During a recent audit, it was discovered that several user accounts belonging to former employees were still active and had valid VPN permissions.
Which of the following would help reduce the amount of risk the organization incurs in this situation in the future?- ATime-of-day restrictions
- BUser access reviews
- CGroup-based privileges
- DChange management policies
84An organization is working with a cloud services provider to transition critical business applications to a hybrid cloud environment. The organization retains sensitive customer data and wants to ensure the provider has sufficient administrative and logical controls in place to protect its data.
In which of the following documents would this concern MOST likely be addressed?- AService level agreement
- BInterconnection security agreement
- CNon-disclosure agreement
- DBusiness process analysis
85A security administrator wants to implement a company-wide policy to empower data owners to manage and enforce access control rules on various resources.
Which of the following should be implemented?- AMandatory access control
- BDiscretionary access control
- CRole based access control
- DRule-based access control
86Which of the following BEST describes an attack where communications between two parties are intercepted and forwarded to each party with neither party being aware of the interception and potential modification to the communications?
- ASpear phishing
- BMain-in-the-middle
- CURL hijacking
- DTransitive access
87A security administrator wishes to implement a secure a method of file transfer when communicating with outside organizations.
Which of the following protocols would BEST facilitate secure file transfers? (Select TWO)- ASCP
- BTFTP
- CSNMP
- DFTP
- ESMTP
- FFTPS
88A technician needs to implement a system which will properly authenticate users by their username and password only when the users are logging in from a computer in the office building.
Any attempt to authenticate from a location other than the office building should be rejected.
Which of the following MUST the technician implement?- ADual factor authentication
- BTransitive authentication
- CSingle factor authentication
- DBiometric authentication
89After correctly configuring a new wireless enabled thermostat to control the temperature of the company's meeting room, Joe, a network administrator determines that the thermostat is not connecting to the internet-based control system. Joe verifies that the thermostat received the expected network parameters and it is associated with the AP. Additionally, the other wireless mobile devices connected to the same wireless network are functioning properly. The network administrator verified that the thermostat works when tested at his residence.
Which of the following is the MOST likely reason the thermostat is not connecting to the internet?- AThe company implements a captive portal
- BThe thermostat is using the incorrect encryption algorithm
- Cthe WPA2 shared likely is incorrect
- DThe company's DHCP server scope is full
90A Chief Security Officer (CSO) has been unsuccessful in attempts to access the website for a potential partner (www.example.net).
Which of the following rules is preventing the CSO from accessing the site?
Blocked sites: *.nonews.com, *.rumorhasit.net, *.mars?- ARule 1: deny from inside to outside source any destination any service smtp
- BRule 2: deny from inside to outside source any destination any service ping
- CRule 3: deny from inside to outside source any destination {blocked sites} service http-https
- DRule 4: deny from any to any source any destination any service any
Información
- Descripción
- Security Plus Test sobre Security 3rd, creado por kaz Jacks el 28/02/2019.
- Autor
- kaz Jacks
- Idioma
- English
- Visitas
- 1
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test