Q1. Which one of the following is a threat related to the use of web-based client side input validation? 

A. Users would be able to alter the input after validation has occurred 

B. The web server would not be able to validate the input after transmission 

C. The client system could receive invalid input from the web server 

D. The web server would not be able to receive invalid input from the client 

View Answer

Q2. Which of the following MUST system and database administrators be aware of and apply when configuring systems used for storing personal employee data? 

A. Secondary use of the data by business users 

B. The organization's security policies and standards 

C. The business purpose for which the data is to be used 

D. The overall protection of corporate resources and data 

View Answer

Q3. While impersonating an Information Security Officer (ISO), an attacker obtains information from company employees about their User IDs and passwords. Which method of information gathering has the attacker used? 

A. Trusted path 

B. Malicious logic 

C. Social engineering 

D. Passive misuse 

View Answer

Q4. Which of the following is an appropriate source for test data? 

A. Production.data that is secured and maintained only in the production environment. 

B. Test data that has no similarities to production.data. 

C. Test data that is mirrored and kept up-to-date with production data. 

D. Production.data that has been.sanitized before loading into a test environment. 

View Answer

Q5. Passive Infrared Sensors (PIR) used in a non-climate controlled environment should 

A. reduce the detected object temperature in relation to the background temperature. 

B. increase the detected object temperature in relation to the background temperature. 

C. automatically compensate for variance in background temperature. 

D. detect objects of a specific temperature independent of the background temperature. 

View Answer

Q6. Following the completion of a network security assessment, which of the following can BEST be demonstrated? 

A. The effectiveness of controls can be accurately measured 

B. A penetration test of the network will fail 

C. The network is compliant to industry standards 

D. All unpatched vulnerabilities have been identified 

View Answer

Q7. Which of the following does Temporal Key Integrity Protocol (TKIP) support? 

A. Multicast and broadcast messages 

B. Coordination of IEEE 802.11 protocols 

C. Wired Equivalent Privacy (WEP) systems 

D. Synchronization of.multiple devices 

View Answer

Q8. The BEST example of the concept of "something that a user has" when providing an authorized user access to a computing system is 

A. the user's hand geometry. 

B. a credential stored in a token. 

C. a passphrase. 

D. the user's face. 

View Answer

Q9. HOTSPOT 

In the network design below, where.is.the.MOST secure.Local Area Network (LAN).segment to deploy a.Wireless.Access.Point (WAP) that provides.contractors.access to the Internet and authorized enterprise services? 

View Answer

Q10. Which methodology is recommended for penetration testing to be effective in the development phase of the life-cycle process? 

A. White-box testing 

B. Software fuzz testing 

C. Black-box testing 

D. Visual testing 

View Answer