Term
| A security administrator is segregating all web-facing traffic from the internal network and restricting it to a single interface on a firewall. Which of the following BEST describes this new network? |
|
Definition
|
|
Term
| Which of the following was based on a previous X.500 specification that allows either unencrypted authentication or encrypted authentication through the use of TLS? |
|
Definition
|
|
Term
| The Quality Assurance team is testing a new third party developed application. The Quality team does not have any experience with the application. Which if the following is the team performing? |
|
Definition
|
|
Term
| Which of the following has a storage root key? |
|
Definition
|
|
Term
| A datacenter requires that staff be able to clearly identify whether or not items have been removed from the facility. Which of the following controls will allow the organization to provide automated notification of item removal? |
|
Definition
|
|
Term
| A malicious person gained access to a datacenter by ripping the proximity badge reader off the wall near the datacenter entrance. This caused the electronic locks on the datacenter door to release because: |
|
Definition
| system was designed to fail open for life-safety. |
|
|
Term
| The concept of rendering data passing between two points over an IP based network impervious to all but the most sophisticated advanced threats is BEST categorized as which of the following? |
|
Definition
|
|
Term
| On Monday, all company employees report being unable to connect to the corporate wireless network, which uses 802.1x with PEAP. A technician verifies that no configuration changes were made to the wireless network and its supporting infrastructure, and that there are no outages. Which of the following is the MOST likely cause for this issue? |
|
Definition
| The Remote Authentication Dial-in User Service server certificate has expired. |
|
|
Term
| Which of the following would BEST deter an attacker trying to brute force 4-digit PIN numbers to access an account at a bank teller machine? |
|
Definition
|
|
Term
| An administrator discovers that many users have used their same passwords for years even though the network requires that the passwords be changed every six weeks. Which of the following, when used together, would BEST prevent users from reusing their existing password? |
|
Definition
Password age
Password history |
|
|
Term
| A recent audit has discovered that at the time of password expiration clients are able to recycle the previous credentials for authentication. Which of the following controls should be used together to prevent this from occurring? |
|
Definition
Password age
Password history |
|
|
Term
| A system administrator is configuring UNIX accounts to authenticate against an external server. The configuration file asks for the following information DC=ServerName and DC=COM. Which of the following authentication services is being used? |
|
Definition
|
|
Term
| In Kerberos, the Ticket Granting Ticket (TGT) is used for which of the following? |
|
Definition
|
|
Term
| Which of the following network design elements allows for many internal devices to share one public IP address? |
|
Definition
|
|
Term
| Which of the following components of an all-in-one security appliance would MOST likely be configured in order to restrict access to peer-to-peer file sharing websites? |
|
Definition
| Incorporating diversity into redundant design |
|
|
Term
| During the information gathering stage of a deploying role-based access control model, which of the following information is MOST likely required? |
|
Definition
| Matrix of job titles with required access privileges |
|
|
Term
| The Chief Technical Officer (CTO) has been informed of a potential fraud committed by a database administrator performing several other job functions within the company. which of the following is the BEST method to prevent such activities in the future? |
|
Definition
|
|
Term
| Ann would like to forward some Personal Identifiable Information (PII)to her HP department by email, but she is worried about confidentiality of the information. Which of the following will accomplish this task accurately? |
|
Definition
|
|
Term
| A company is trying to limit the risk associated with the use of unapproved USB devices to copy documents. Which of the following would be the BEST technology control to use in this scenario? |
|
Definition
|
|
Term
| A company is trying to implement physical deterrent controls to improve the overall security posture of their data center. Which of the following BEST meets their goal? |
|
Definition
|
|
Term
| A company's employees were victims of a spear phishing campaign impersonating the CEO. The company would now like to implement a solution to improve the overall security posture by assuring their employees that email originated from the CEO. Which of the following controls could they implement to BEST meet this goal? |
|
Definition
|
|
Term
| A security technician is attempting to improve the overall security posture of an internal mail server. Which of the following actions would BEST accomplish this goal? |
|
Definition
| Disabling unnecessary services |
|
|
Term
| A bank has recently deployed mobile tablets to all loan officers for use at customer sites. Which of the following would best prevent the disclosure of customer data in the even that a tablet is lost or stolen? |
|
Definition
|
|
Term
| Which of the following is the primary security concern when deploying a mobile device on a network? |
|
Definition
|
|
Term
| Which of the following technical controls is BEST used to define which applications a user can install and run on a company issued mobile device? |
|
Definition
|
|
