C1 - NetSec

A security service company is conducting an audit in several risk areas within a major corporation. What statement describes the risk of access to cloud storage devices?

• the retrieval of confidential or personal information from a lost or stolen device that was not configured to use encryption software
• the unauthorized transfer of data containing valuable corporate information to a USB drive
• sensitive data lost through access to the cloud that has been compromised due to weak security settings
• intercepted emails that reveal confidential corporate or personal information

A security service company is conducting an audit in several risk areas within a major corporation. What statement describes the risk of using social networking?

• sensitive data lost through access to the cloud that has been compromised due to weak security settings
• gaining illegal access to corporate data by stealing passwords or cracking weak passwords
• data loss through access to personal or corporate instant messaging and social media sites
• the retrieval of confidential or personal information from a lost or stolen device that was not configured to use encryption software

A security service company is conducting an audit in several risk areas within a major corporation. What statement describes an attack vector?

• the potential of causing great damage because of direct access to the building and its infrastructure devices
• the unauthorized transfer of data containing valuable corporate information to a USB drive
• the path by which a threat actor can gain access to a server, host, or network
• the retrieval of confidential or personal information from a lost or stolen device that was not configured to use encryption software

A security service company is conducting an audit in several risk areas within a major corporation. What statement describes the risk of access to removable media?

• the potential of causing great damage because of direct access to the building and its infrastructure devices
• intercepted emails that reveal confidential corporate or personal information
• the unauthorized transfer of data containing valuable corporate information to a USB drive
• data loss through access to personal or corporate instant messaging and social media sites

A security service company is conducting an audit in several risk areas within a major corporation. What statement describes an internal threat?

• the path by which a threat actor can gain access to a server, host, or network
• intercepted emails that reveal confidential corporate or personal information
• the potential of causing great damage because of direct access to the building and its infrastructure devices
• gaining valuable information through the retrieval of discarded unshredded reports

Which condition describes the potential threat created by Instant On in a data center?

• when the primary IPS appliance is malfunctioning
• when the primary firewall in the data center crashes
• when a VM that may have outdated security policies is brought online after a long period of inactivity
• when an attacker hijacks a VM hypervisor and then launches attacks against other devices in the data center

Answer explanation

• The phrase Instant On describes a potential threat to a VM when it is brought online after it has not been used for a period of time. Because it is offline for a while, it may have outdated security policies that deviate from the baseline security and can introduce security vulnerabilities.

Which security feature or device would more likely be used within a CAN than a SOHO or data center?

• ESA/WSA
• wireless router
• exit sensors
• security trap
• virtual security gateway

Answer explanation

• A Cisco Email Security Appliance (ESA) and Web Security Appliance (WSA) provide advanced threat defense, application visibility and control, reporting, and secure mobility to secure and control email and web traffic at within a campus area network (CAN). A wireless router is a common defense mechanism used in a SOHO. Exit sensors and a security trap are features used within a data center. A virtual security gateway is integrated into Cisco Nexus switches and is used for inter-virtual machine security.

A company has several sales offices distributed within a city. Each sales office has a SOHO network. What are two security features that are commonly found in such a network configuration? (Choose two.)

• Cisco ASA firewall
• port security on user facing ports
• WPA2
• biometric verifications
• Virtual Security Gateway within Cisco Nexus switches

Answer explanation

• Small Office and Home Office (SOHO) networks are typically protected using a consumer grade wireless router that includes both wired and wireless connections. WPA2 is commonly used for wireless encryption and port security is used to ensure non-company devices are not plugged into the wired network.

What are two data protection functions provided by MDM? (Choose two.)

• quarantine
• inoculation
• PIN locking
• physical security
• remote wiping

Answer explanation

• Data protection functions include PIN locking, encryption, and remote data wiping. In contrast, data loss prevention prevents authorized users from doing careless or malicious things with data important to the organization.

What is the motivation of a white hat attacker?

• taking advantage of any vulnerability for illegal personal gain
• fine tuning network devices to improve their performance and efficiency
• studying operating systems of various platforms to develop a new system
• discovering weaknesses of networks and systems to improve the security level of these systems

Answer explanation

• White hat attackers break into networks or computer systems in order to discover weaknesses for the purpose of improving the security of these systems. These break-ins are done with permission from the owner or the organization. Any results are reported back to the owner or the organization.