12.1-12.2 Security Concepts and Risk Management

Multiple Choice

Which of the following is an example of an internal threat?

• A server backdoor allows an attacker on the internet to gain access to the intranet site.

• A user accidentally deletes the new product designs.

• A delivery man is able to walk into a controlled area and steal a laptop.

• A water pipe in the server room breaks.

Multiple Choice

Telnet is inherently unsecure because its communication is in plaintext and is easily intercepted. Which of the following is an acceptable alternative to Telnet?

• SSH

• SLIP

• Remote Desktop

• PPP

Multiple Choice

Which protocol does HTTPS use to offer greater security for web transactions?

• PAP

• IPsec

• CHAP

• SSL

Multiple Choice

When a wired or wireless host tries to connect to the network, a NAC agent on the host checks it to make sure it has all of the latest operating system updates installed and that the latest antivirus definitions have been applied.

• Port Security

• Remediation

• Quarantine

• Posture Assessment

Multiple Choice

Which of the following types of penetration test teams provides you with information that is most pertinent to a real-world attack?

• Full knowledge team

• Zero knowledge team

• Partial knowledge team

• Split knowledge team

Multiple Select

Which of the following activities are typically associated with a penetration test? (Select two.)

• Interviewing employees to verify that the security policy is being followed.

• Running a vulnerability scanner on network servers.

• Attempting social engineering.

• Running a port scanner.

• Creating a performance baseline.