Q1. DRAG DROP 

In which order, from MOST to LEAST impacted, does user awareness training reduce the occurrence of the events below?.

View Answer

Q2. What is the PRIMARY difference between security policies and security procedures? 

A. Policies are used to enforce violations, and procedures create penalties 

B. Policies point to guidelines, and procedures are more contractual in nature 

C. Policies are included in awareness training, and procedures give guidance 

D. Policies are generic in nature, and procedures contain operational details 

View Answer

Q3. A security professional is asked to provide a solution that restricts a.bank.teller to only perform a savings deposit transaction but allows a supervisor to perform corrections after the transaction. Which of the following is the MOST effective solution? 

A. Access is based on rules. 

B. Access is determined by the system. 

C. Access is based on user's role. 

D. Access is based on data sensitivity. 

View Answer

Q4. After acquiring the latest security updates, what must be done before deploying to production systems? 

A. Use tools to detect missing system patches 

B. Install the patches on a test system 

C. Subscribe to notifications for vulnerabilities 

D. Assess the severity of the situation 

View Answer

Q5. An organization allows ping traffic into and out of their network. An attacker has installed a program on the network that uses the payload portion of the ping packet to move data into and out of the network. What type of attack has the organization experienced? 

A. Data leakage 

B. Unfiltered channel 

C. Data emanation 

D. Covert channel 

View Answer

Q6. A business has implemented Payment Card Industry Data Security Standard (PCI-DSS) compliant handheld credit card processing on their Wireless Local Area Network.(WLAN) topology. The.network team.partitioned the WLAN to.create a private segment for credit card processing using a firewall to control device access and route traffic to the card processor on the Internet. What components are in the scope of PCI-DSS? 

A. The entire enterprise network infrastructure. 

B. The handheld devices, wireless access points and border gateway. 

C. The end devices, wireless access points, WLAN, switches, management console, and firewall. 

D. The end devices, wireless access points, WLAN, switches, management console, and Internet 

View Answer

Q7. Which of the following defines the key exchange for Internet Protocol Security (IPSec)? 

A. Secure Sockets Layer (SSL) key exchange 

B. Internet Key Exchange (IKE) 

C. Security Key Exchange (SKE) 

D. Internet Control Message Protocol (ICMP) 

View Answer

Q8. Secure Sockets Layer (SSL) encryption protects 

A. data at rest. 

B. the source IP address. 

C. data transmitted. 

D. data availability. 

View Answer

Q9. Refer.to the information below to answer the question. 

In a Multilevel Security (MLS) system, the following sensitivity labels are used in increasing levels of sensitivity: restricted, confidential, secret, top secret. Table A lists the clearance levels for four users, while Table B lists the security classes of four different files. 

Which of the following is true according to the star property (*property)? 

A. User D can write to.File 1 

B. User.B can write to File 1 

C. User A can write to File 1 

D. User C can.write to.File 1 

View Answer

Q10. After a thorough analysis, it was discovered that a perpetrator compromised a network by gaining access to the network through a Secure Socket Layer (SSL) Virtual Private Network (VPN) gateway. The perpetrator guessed a username and brute forced the password to gain access. Which of the following BEST mitigates this issue? 

A. Implement strong passwords authentication for VPN 

B. Integrate the VPN with centralized credential stores 

C. Implement an Internet Protocol Security (IPSec) client 

D. Use two-factor authentication mechanisms 

View Answer