Test
401 (con't)
Preguntas del test (110)
1Which of the following technologies uses multiple devices to share work?
- ASwitching
- BLoad balancing
- CRAID
- DVPN concentrator
2Which of the following protocols uses an asymmetric key to open a session and then establishes a symmetric key for the remainder of the session?
- ASFTP
- BHTTPS
- CTFTP
- DTLS
3Which of the following describes how Sara, an attacker, can send unwanted advertisements to a mobile device?
- AMan-in-the-middle
- BBluejacking
- CBluesnarfing
- DPacket sniffing
4Pete, an employee, is terminated from the company and the legal department needs documents from his encrypted hard drive. Which of the following should be used to accomplish this task? (Select TWO).
- APrivate hash
- BRecovery agent
- CPublic key
- DKey escrow
- ECRL
5Which of the following mitigation strategies is established to reduce risk when performing updates to business critical systems?
- AIncident management
- BServer clustering
- CChange management
- DForensic analysis
6Which of the following can Pete, a security administrator, use to distribute the processing effort when generating hashes for a password cracking program?
- ARAID
- BClustering
- CRedundancy
- DVirtualization
7Which of the following should Jane, a security administrator, perform before a hard drive is analyzed with forensics tools?
- AIdentify user habits
- BDisconnect system from network
- CCapture system image
- DInterview witnesses
8Jane, an administrator, needs to make sure the wireless network is not accessible from the parking area of their office. Which of the following would BEST help Jane when deploying a new access point?
- APlacement of antenna
- BDisabling the SSID
- CImplementing WPA2
- DEnabling the MAC filtering
9Which of the following allows Pete, a security technician, to provide the MOST secure wireless implementation?
- AImplement WPA
- BDisable SSID
- CAdjust antenna placement
- DImplement WEP
10Which of the following is a management control?
- ALogon banners
- BWritten security policy
- CSYN attack prevention
- DAccess Control List (ACL)
11Which of the following security strategies allows a company to limit damage to internal systems and provides loss control?
- ARestoration and recovery strategies
- BDeterrent strategies
- CContainment strategies
- DDetection strategies
12In order for Sara, a client, to logon to her desktop computer, she must provide her username, password, and a four digit PIN. Which of the following authentication methods is Sara using?
- AThree factor
- BSingle factor
- CTwo factor
- DFour factor
13Using proximity card readers instead of the traditional key punch doors would help to mitigate:
- AImpersonation
- BTailgating
- CDumpster diving
- DShoulder surfing
14Which of the following application attacks is used to gain access to SEH?
- ACookie stealing
- BBuffer overflow
- CDirectory traversal
- DXML injection
15Which of the following is an authentication service that uses UDP as a transport medium?
- ATACACS+
- BLDAP
- CKerberos
- DRADIUS
16Which of the following can be used on a smartphone to BEST protect against sensitive data loss if the device is stolen? (Select TWO)
- ATethering
- BScreen lock PIN
- CRemote wipe
- DEmail password
- EGPS tracking
- FDevice encryption
17Jane, a security analyst, is reviewing logs from hosts across the Internet which her company uses to gather data on new malware. Which of the following is being implemented by Jane's company?
- AVulnerability scanner
- BHoneynet
- CProtocol analyzer
- DPort scanner
18Which of the following should Pete, a security manager, implement to reduce the risk of employees working in collusion to embezzle funds from their company?
- APrivacy Policy
- BLeast Privilege
- CAcceptable Use
- DMandatory Vacations
19Which of the following will allow Pete, a security analyst, to trigger a security alert because of a tracking cookie?
- ANetwork based firewall
- BAnti-spam software
- CHost based firewall
- DAnti-spyware software
20Which of the following protocols allows for secure transfer of files? (Select TWO).
- AICMP
- BSNMP
- CSFTP
- DSCP
- ETFTP
21Which of the following passwords is the LEAST complex?
- AMyTrain!45
- BMytr@in!!
- CMyTr@in12
- DMyTr@in#8
22During a penetration test from the Internet, Jane, the system administrator, was able to establish a connection to an internal router, but not successfully log in to it. Which ports and protocols are MOST likely to be open on the firewall? (Select FOUR).
- A21
- B22
- C23
- D69
- E3389
- FSSH
- GTerminal services
- HRlogin
- IRsynce
- JTelnet
23Which of the following is an application security coding problem?
- AError and exception handling
- BPatch management
- CApplication hardening
- DApplication fuzzing
24An IT security technician needs to establish host based security for company workstations. Which of the following will BEST meet this requirement?
- AImplement IIS hardening by restricting service accounts
- BImplement database hardening by applying vendor guidelines
- CImplement perimeter firewall rules to restrict access
- DImplement OS hardening by applying GPOs
25Which of the following is the MOST specific plan for various problems that can arise within a system?
- ABusiness Continuity Plan
- BContinuity of Operation Plan
- CDisaster Recovery Plan
- DIT Contingency Plan
26Which of the following BEST describes the weakness in WEP encryption?
- AThe initialization vector of WEP uses a crack-able RC4 encryption algorithm. Once enough packets are captured an XOR operation can be performed and the asymmetric keys can be derived.
- BThe WEP key is stored in plain text and split in portions across 224 packets of random data. Once enough packets are sniffed the IV portion of the packets can be removed leaving the plain text key.
- CThe WEP key has a weak MD4 hashing algorithm used. A simple rainbow table can be used to generate key possibilities due to MD4 collisions.
- DThe WEP key is stored with a very small pool of random numbers to make the cipher text. As the random numbers are often reused it becomes easy to derive the remaining WEP key.
27Sara, the Chief Security Officer (CSO), has had four security breaches during the past two years. Each breach has cost the company $3,000. A third party vendor has offered to repair the security hole in the system for $25,000. The breached system is scheduled to be replaced in five years. Which of the following should Sara do to address the risk?
- AAccept the risk saving $10,000
- BIgnore the risk saving $5,000
- CMitigate the risk saving $10,000
- DTransfer the risk saving $5,000
28Which of the following is an authentication and accounting service that uses TCP for connecting to routers and switches?
- ADIAMETER
- BRADIUS
- CTACACS+
- DKerberos
29Which of the following can BEST help prevent cross-site scripting attacks and buffer overflows on a production system?
- AInput validation
- BNetwork intrusion detection system
- CAnomaly-based HIDS
- DPeer review
30Pete, an IT Administrator, needs to secure his server room. Which of the following mitigation methods would provide the MOST physical protection?
- ASign in and sign out logs
- BMantrap
- CVideo surveillance
- DHVAC
31Which of the following should be connected to the fire alarm system in order to help prevent the spread of a fire in a server room without data loss to assist in an FM-200 deployment?
- AWater base sprinkler system
- BElectrical
- CHVAC
- DVideo surveillance
32Matt, a security consultant, has been tasked with increasing server fault tolerance and has been given no budget to accomplish his task. Which of the following can Matt implement to ensure servers will withstand hardware failure?
- AHardware load balancing
- BRAID
- CA cold site
- DA host standby
33Which of the following fire suppression systems is MOST likely used in a datacenter?
- AFM-200
- BDry-pipe
- CWet-pipe
- DVacuum
34A security administrator has installed a new KDC for the corporate environment. Which of the following authentication protocols is the security administrator planning to implement across the organization?
- ALDAP
- BRADIUS
- CKerberos
- DXTACACS
35While opening an email attachment, Pete, a customer, receives an error that the application has encountered an unexpected issue and must be shut down. This could be an example of which of the following attacks?
- ACross-site scripting
- BBuffer overflow
- CHeader manipulation
- DDirectory traversal
36Jane has recently implemented a new network design at her organization and wishes to passively identify security issues with the new network. Which of the following should Jane perform?
- AVulnerability assessment
- BBlack box testing
- CWhite box testing
- DPenetration testing
37A security technician is working with the network firewall team to implement access controls at the company's demarc as part of the initiation of configuration management processes. One of the network technicians asks the security technician to explain the access control type found in a firewall. With which of the following should the security technician respond?
- ARule based access control
- BRole based access control
- CDiscretionary access control
- DMandatory access control
38Jane, a security administrator, has been tasked with explaining authentication services to the company's management team. The company runs an active directory infrastructure. Which of the following solutions BEST relates to the host authentication protocol within the company's environment?
- AKerberos
- BLeast privilege
- CTACACS+
- DLDAP
39Pete, the compliance manager, wants to meet regulations. Pete would like certain ports blocked only on all computers that do credit card transactions. Which of the following should Pete implement to BEST achieve this goal?
- AA host-based intrusion prevention system
- BA host-based firewall
- CAntivirus update system
- DA network-based intrusion detection system
40Pete, the system administrator, wants to restrict access to advertisements, games, and gambling web sites. Which of the following devices would BEST achieve this goal?
- AFirewall
- BSwitch
- CURL content filter
- DSpam filter
41Pete, the system administrator, wishes to monitor and limit users' access to external websites. Which of the following would BEST address this?
- ABlock all traffic on port 80
- BImplement NIDS
- CUse server load balancers
- DInstall a proxy server
42Sara, the security administrator, must configure the corporate firewall to allow all public IP addresses on the internal interface of the firewall to be translated to one public IP address on the external interface of the same firewall. Which of the following should Sara configure?
- APAT
- BNAP
- CDNAT
- DNAC
43Matt, a security analyst, needs to select an asymmetric encryption method that allows for the same level of encryption strength with a lower key length than is typically necessary. Which of the following encryption methods offers this capability?
- ATwofish
- BDiffie-Hellman
- CECC
- DRSA
44Sara, a security analyst, is trying to prove to management what costs they could incur if their customer database was breached. This database contains 250 records with PII. Studies show that the cost per record for a breach is $300. The likelihood that their database would be breached in the next year is only 5%. Which of the following is the ALE that Sara should report to management for a security breach?
- A$1,500
- B$3,750
- C$15,000
- D$75,000
45Methods to test the responses of software and web applications to unusual or unexpected inputs is known as:
- ABrute force
- BHTML encoding
- CWeb crawling
- DFuzzing
46Pete needs to open ports on the firewall to allow for secure transmission of files. Which of the following ports should be opened on the firewall?
- A TCP 23
- BUDP 69
- CTCP 22
- DTCP 21
47Sara, a security architect, has developed a framework in which several authentication servers work together to increase processing power for an application. Which of the following does this represent?
- AWarm site
- BLoad balancing
- CClustering
- DRAID
48Which statement is TRUE about the operation of a packet sniffer?
- AIt can only have one interface on a management network
- BThey are required for firewall operation and stateful inspection
- CThe Ethernet card must be placed in promiscuous mode
- DIt must be placed on a single virtual LAN interface
49Which of the following firewall rules only denies DNS zone transfers?
- Adeny udp any any port 53
- Bdeny ip any any
- Cdeny tcp any any port 53
- Ddeny all dns packets
50Which of the following BEST explains the use of an HSM within the company servers?
- AThumb drives present a significant threat which is mitigated by HSM
- BSoftware encryption can perform multiple functions required by HSM
- CData loss by removable media can be prevented with DLP
- DHardware encryption is faster than software encryption
51Which of the following technologies can store multi-tenant data with different security requirements?
- AData loss prevention
- BTrusted platform module
- CHard drive encryption
- DCloud computing
52Matt, a security analyst, needs to implement encryption for company data and also prevent theft of company data. Where and how should Matt meet this requirement?
- AMatt should implement access control lists and turn on EFS
- BMatt should implement DLP and encrypt the company database
- CMatt should install Truecrypt and encrypt the company server
- DMatt should install TPMs and encrypt the company database
53Which of the following types of encryption will help in protecting files on a PED?
- AMobile device encryption
- BTransport layer encryption
- CEncrypted hidden container
- DDatabase encryption
54Which of the following does full disk encryption prevent?
- AClient side attacks
- BClear text access
- CDatabase theft
- DNetwork-based attacks
55Pete, a security analyst, has been informed that the development team has plans to develop an application which does not meet the company's password policy. Which of the following should Pete do NEXT?
- AContact the Chief Information Officer and ask them to change the company password policy so that the application is made compliant
- BTell the application development manager to code the application to adhere to the company's password policy
- CAsk the application development manager to submit a risk acceptance memo so that the issue can be documented
- DInform the Chief Information Officer of non-adherence to the security policy so that the developers can be reprimanded
56Sara, a security manager, has decided to force expiration of all company passwords by the close of business day. Which of the following BEST supports this reasoning?
- AA recent security breach in which passwords were cracked
- BImplementation of configuration management processes
- CEnforcement of password complexity requirements
- DImplementation of account lockout procedures
57Which of the following presents the STRONGEST access control?
- AMAC
- BTACACS
- CDAC
- DRBAC
58Which of the following encompasses application patch management?
- AConfiguration management
- BPolicy management
- CCross-site request forgery
- DFuzzing
59Sara, an application developer, implemented error and exception handling alongside input validation. Which of the following does this help prevent?
- ABuffer overflow
- BPop-up blockers
- CCross-site scripting
- DFuzzing
60Which of the following is the LEAST volatile when performing incident response procedures?
- ARegisters
- BRAID cache
- CRAM
- DHard drive
61Pete, a developer, writes an application. Jane, the security analyst, knows some things about the overall application but does not have all the details. Jane needs to review the software before it is released to production. Which of the following reviews should Jane conduct?
- AGray Box Testing
- BBlack Box Testing
- CBusiness Impact Analysis
- DWhite Box Testing
62The information security team does a presentation on social media and advises the participants not to provide too much personal information on social media web sites. This advice would BEST protect people from which of the following?
- ARainbow tables attacks
- BBrute force attacks
- CBirthday attacks
- DCognitive passwords attacks
63Pete's corporation has outsourced help desk services to a large provider. Management has published a procedure that requires all users, when receiving support, to call a special number. Users then need to enter the code provided to them by the help desk technician prior to allowing the technician to work on their PC. Which of the following does this procedure prevent?
- ACollusion
- BImpersonation
- CPharming
- DTransitive Access
64Pete, the security engineer, would like to prevent wireless attacks on his network. Pete has implemented a security control to limit the connecting MAC addresses to a single port. Which of the following wireless attacks would this address?
- AInterference
- BMan-in-the-middle
- CARP poisoning
- DRogue access point
65Which of the following can be implemented with multiple bit strength?
- AAES
- BDES
- CSHA-1
- DMD5
- AAES
66Pete, the system administrator, has blocked users from accessing social media web sites. In addition to protecting company information from being accidentally leaked, which additional security benefit does this provide?
- ANo competition with the company's official social presence
- BProtection against malware introduced by banner ads
- CIncreased user productivity based upon fewer distractions
- DElimination of risks caused by unauthorized P2P file sharing
67Pete, the system administrator, is reviewing his disaster recovery plans. He wishes to limit the downtime in the event of a disaster, but does not have the budget approval to implement or maintain an offsite location that ensures 99.99% availability. Which of the following would be Pete's BEST option?
- AUse hardware already at an offsite location and configure it to be quickly utilized
- BMove the servers and data to another part of the company's main campus from the server room
- CRetain data back-ups on the main campus and establish redundant servers in a virtual environment
- DMove the data back-ups to the offsite location, but retain the hardware on the main campus for redundancy
68A network stream needs to be encrypted. Sara, the network administrator, has selected a cipher which will encrypt 8 bits at a time before sending the data across the network. Which of the following has Sara selected?
- ABlock cipher
- BStream cipher
- CCRC
- DHashing algorithm
69Which of the following is the BEST approach to perform risk mitigation of user access control rights?
- AConduct surveys and rank the results
- BPerform routine user permission reviews
- CImplement periodic vulnerability scanning
- DDisable user accounts that have not been used within the last two weeks
70Which of the following devices is BEST suited for servers that need to store private keys?
- AHardware security module
- BHardened network firewall
- CSolid state disk drive
- DHardened host firewall
71All of the following are valid cryptographic hash functions EXCEPT:
- ARIPEMD
- BRC4
- CSHA-512
- DMD4
72In regards to secure coding practices, why is input validation important?
- AIt mitigates buffer overflow attacks
- BIt makes the code more readable
- CIt provides an application configuration baseline
- DIt meets gray box testing standards
73Which of the following would be used when a higher level of security is desired for encryption key storage?
- ATACACS+
- BL2TP
- CLDAP
- DTPM
74A security administrator needs to determine which system a particular user is trying to login to at various times of the day. Which of the following log types would the administrator check?
- AFirewall
- BApplication
- CIDS
- DSecurity
75Employee badges are encoded with a private encryption key and specific personal information. The encoding is then used to provide access to the network. Which of the following describes this access control type?
- ASmartcard
- BToken
- CDiscretionary access control
- DMandatory access control
76Which of the following devices would MOST likely have a DMZ interface?
- AFirewall
- BSwitch
- CLoad balancer
- DProxy
77Which of the following application security testing techniques is implemented when an automated system generates random input data?
- AFuzzing
- BXSRF
- CHardening
- DInput validation
78Which of the following can be used by a security administrator to successfully recover a user's forgotten password on a password protected file?
- ACognitive password
- BPassword sniffing
- CBrute force
- DSocial engineering
79A security administrator wants to check user password complexity. Which of the following is the BEST tool to use?
- APassword history
- BPassword logging
- CPassword cracker
- DPassword hashing
80Certificates are used for: (Select TWO).
- AClient authentication
- BWEP encryption
- CAccess control lists
- DCode signing
- EPassword hashing
81An achievement in providing worldwide Internet security was the signing of certificates associated with which of the following protocols?
- ATCP/IP
- BSSL
- CSCP
- DSSH
82A Chief Information Security Officer (CISO) wants to implement two-factor authentication within the company. Which of the following would fulfill the CISO's requirements?
- AUsername and password
- BRetina scan and fingerprint scan
- CUSB token and PIN
- DProximity badge and token
83Which of the following can a security administrator implement on mobile devices that will help prevent unwanted people from viewing the data if the device is left unattended?
- AScreen lock
- BVoice encryption
- CGPS tracking
- DDevice encryption
84Which of the following would a security administrator implement in order to identify a problem between two systems that are not communicating properly?
- AProtocol analyzer
- BBaseline report
- CRisk assessment
- DVulnerability scan
85Which of the following can result in significant administrative overhead from incorrect reporting?
- AJob rotation
- BAcceptable usage policies
- CFalse positives
- DMandatory vacations
86A security administrator wants to perform routine tests on the network during working hours when certain applications are being accessed by the most people. Which of the following would allow the security administrator to test the lack of security controls for those applications with the least impact to the system?
- APenetration test
- BVulnerability scan
- CLoad testing
- DPort scanner
87Which of the following risk concepts requires an organization to determine the number of failures per year?
- ASLE
- BALE
- CMTBF
- DQuantitative analysis
88Three of the primary security control types that can be implemented are:
- Asupervisory, subordinate, and peer
- Bpersonal, procedural, and legal
- Coperational, technical, and management
- Dmandatory, discretionary, and permanent
89The helpdesk reports increased calls from clients reporting spikes in malware infections on their systems. Which of the following phases of incident response is MOST appropriate as a FIRST response?
- ARecovery
- BFollow-up
- CValidation
- DIdentification
90A company is trying to implement physical deterrent controls to improve the overall security posture of their data center. Which of the following BEST meets their goal?
- AVisitor logs
- BFirewall
- CHardware locks
- DEnvironmental monitoring
91A company's employees were victims of a spear phishing campaign impersonating the CEO. The company would now like to implement a solution to improve the overall security posture by assuring their employees that email originated from the CEO. Which of the following controls could they implement to BEST meet this goal?
- ASpam filter
- BDigital signatures
- CAntivirus software
- DDigital certificates
92A security technician is attempting to improve the overall security posture of an internal mail server. Which of the following actions would BEST accomplish this goal?
- AMonitoring event logs daily
- BDisabling unnecessary services
- CDeploying a content filter on the network
- DDeploy an IDS on the network
93A bank has recently deployed mobile tablets to all loan officers for use at customer sites. Which of the following would BEST prevent the disclosure of customer data in the event that a tablet is lost or stolen?
- AApplication control
- BRemote wiping
- CGPS
- DScreen-locks
94Which of the following is the primary security concern when deploying a mobile device on a network?
- AStrong authentication
- BInteroperability
- CData security
- DCloud storage technique
95Which of the following technical controls is BEST used to define which applications a user can install and run on a company issued mobile device?
- AAuthentication
- BBlacklisting
- CWhitelisting
- DAcceptable use policy
96After a company has standardized to a single operating system, not all servers are immune to a well-known OS vulnerability. Which of the following solutions would mitigate this issue?
- AHost based firewall
- BInitial baseline configurations
- CDiscretionary access control
- DPatch management system
97A security administrator discovers an image file that has several plain text documents hidden in the file. Which of the following security goals is met by camouflaging data inside of other files?
- AIntegrity
- BConfidentiality
- CSteganography
- DAvailability
98A company determines a need for additional protection from rogue devices plugging into physical ports around the building. Which of the following provides the highest degree of protection from unauthorized wired network access?
- AIntrusion Prevention Systems
- BMAC filtering
- CFlood guards
- D802.1x
99A company is preparing to decommission an offline, non-networked root certificate server. Before sending the server's drives to be destroyed by a contracted company, the Chief Security Officer (CSO) wants to be certain that the data will not be accessed. Which of the following, if implemented, would BEST reassure the CSO? (Select TWO)
- ADisk hashing procedures
- BFull disk encryption
- CData retention policies
- DDisk wiping procedures
- ERemovable media encryption
100During the analysis of a PCAP file, a security analyst noticed several communications with a remote server on port 53. Which of the following protocol types is observed in this traffic?
- AFTP
- BDNS
- CEmail
- DNetBIOS
101A compromised workstation utilized in a Distributed Denial of Service (DDOS) attack has been removed from the network and an image of the hard drive has been created. However, the system administrator stated that the system was left unattended for several hours before the image was created. In the event of a court case, which of the following is likely to be an issue with this incident?
- AEye Witness
- BData Analysis of the hard drive
- CChain of custody
- DExpert Witness
102During which of the following phases of the Incident Response process should a security administrator define and implement general defense against malware?
- ALessons Learned
- BPreparation
- CEradication
- DIdentification
103Due to hardware limitation, a technician must implement a wireless encryption algorithm that uses the RC4 protocol. Which of the following is a wireless encryption solution that the technician should implement while ensuring the STRONGEST level of security?
- A WPA2-AES
- B802.11ac
- CWPA-TKIP
- DWEP
104Joe, a user, wants to send an encrypted email to Ann. Which of the following will Ann need to use to verify that the email came from Joe and decrypt it? (Select TWO).
- AThe CA's public key
- BAnn's public key
- CJoe's private key
- DAnn's private key
- EThe CA's private key
- FJoe's public key
105Joe, a user, wants to send an encrypted email to Ann. Which of the following will Ann need to use to verify the validity's of Joe's certificate? (Select TWO).
- AThe CA's public key
- BJoe's private key
- CAnn's public key
- DThe CA's private key
- EJoe's public key
- FAnn's private key
106A technician wants to implement a dual factor authentication system that will enable the organization to authorize access to sensitive systems on a need-to-know basis. Which of the following should be implemented during the authorization stage?
- ABiometrics
- BMandatory access control
- CSingle sign-on
- DRole-based access control
107A security researcher wants to reverse engineer an executable file to determine if it is malicious. The file was found on an underused server and appears to contain a zero-day exploit. Which of the following can the researcher do to determine if the file is malicious in nature?
- ATCP/IP socket design review
- BExecutable code review
- COS Baseline comparison
- DSoftware architecture review
108A recent spike in virus detections has been attributed to end-users visiting www.compnay.com. The business has an established relationship with an organization using the URL of www.company.com but not with the site that has been causing the infections. Which of the following would BEST describe this type of attack?
- ATypo squatting
- BSession hijacking
- CCross-site scripting
- DSpear phishing
109A company has proprietary mission critical devices connected to their network which are configured remotely by both employees and approved customers. The administrator wants to monitor device security without changing their baseline configuration. Which of the following should be implemented to secure the devices without risking availability?
- AHost-based firewall
- BIDS
- CIPS
- DHoneypot
110An administrator has a network subnet dedicated to a group of users. Due to concerns regarding data and network security, the administrator desires to provide network access for this group only. Which of the following would BEST address this desire?
- AInstall a proxy server between the users' computers and the switch to filter inbound network traffic.
- BBlock commonly used ports and forward them to higher and unused port numbers.
- CConfigure the switch to allow only traffic from computers based upon their physical address.
- DInstall host-based intrusion detection software to monitor incoming DHCP Discover requests.
Información
- Descripción
- study
- Autor
- maxwell3254
- Idioma
- English
- Visitas
- 111
- Etiquetas
- Valoración
- Aún sin valoraciones Valora este test