Chp 8

Select all 3 types of information security positions.

• definers,

• builders,

• monitors,

• defenders

As a security professional, there is a possibility to have access to sensitive data and assets. What is one item a security professional should understand in order to make informed ethical decisions?

• partnerships

• potential gain

• potential bonus

• laws governing the data

An organization has implemented a private cloud infrastructure. In order to secure the infrastructure from potential threats. What three tactics can be implemented to protect the private cloud? (Choose three.)

• Hire a consultant.

• Test inbound and outbound traffic.

• Disable ping, probing, and port scanning.

• Update devices with security fixes and patches.

A company is attempting to lower the cost in deploying commercial software and is considering a cloud based service. Which cloud based service would be best to host the software?

• IaaS

• PaaS

• RaaS

• SaaS

What are two potential threats to applications? (Choose two.)

• data loss

• social engineering

• power interruptions

• unauthorized access

What three services does CERT provide? (Choose three.)

• develop attack tools

• resolve software vulnerabilities

• develop tools, products, and methods to analyze vulnerabilities

• develop tools, products, and methods to conduct forensic examinations

A school administrator is concerned with the disclosure of student information due to a breach. Under which act is student information protected?

• CIPA

• COPPA

• FERPA

• HIPPA

A security professional is asked to perform an analysis of the current state of a company network. What tool would the security professional use to scan the network only for security risks?

• malware

• packet analyzer

• pentest

• vulnerability scanner

A breach occurs in a company that processes credit card information. Which industry specific law governs credit card data protection?

• ECPA

• GLBA

• PCI DSS

• SOX

Why is Kali Linux a popular choice in testing the network security of an organization?

• It can be used to intercept and log network traffic.

• It is a network scanning tool that prioritizes security risks.

• It can be used to test weaknesses by using only malicious software.

• It is an open source Linux security distribution and contains over 300 tools.