Network Quiz Demo

Which of the following will help prevent improper session handling?

• Ensure that all UlWebView calls do not execute without proper input validation.
• Ensure that tokens are sufficiently long, complex, and pseudo-random.
• Ensure JavaScript and plugin support is disabled.
• Ensure that certificates are valid and fail closed.

What is the most effective form of media sanitization to ensure residual data cannot be retrieved?

• Clearing
• Destroying
• Purging
• Disposal

What is the process of removing sensitive data from a system or storage device with the intent that the data cannot be reconstructed by any known technique?

• Purging
• Encryption
• Destruction
• Clearing

A Business Continuity Plan/Disaster Recovery Plan (BCP/DRP) will provide which of the following?

• Guaranteed recovery of all business functions
• Minimization of the need decision making during a crisis
• Insurance against litigation following a disaster
• Protection from loss of organization resources

In fault-tolerant systems, what do rollback capabilities permit?

• Restoring the system to a previous functional state
• Identifying the error that caused the problem
• Allowing the system to an in a reduced manner
• Isolating the error that caused the problem

When using Generic Routing Encapsulation (GRE) tunneling over Internet Protocol version 4 (IPv4), where is the GRE header inserted?

• Into the options field
• Between the delivery header and payload
• Between the source and destination addresses
• Into the destination address

The type of authorized interactions a subject can have with an object is

• control.
• permission.
• procedure.
• protocol.

An organization experiencing a negative financial impact is forced to reduce budgets and the number of Information Technology (IT) operations staff performing basic logical access security administration functions. Security processes have been tightly integrated into normal IT operations and are not separate and distinct roles. Which of the following will MOST likely allow the organization to keep risk at an acceptable level?

• Increasing the amount of audits performed by third parties
• Removing privileged accounts from operational staff
• Assigning privileged functions to appropriate staff
• Separating the security function into distinct roles

A large, multinational organization has decided to outsource a portion of their Information Technology (IT) organization to a third-party provider's facility. This provider will be responsible for the design, development, testing, and support of several critical, customer-based applications used by the organization. The third party needs to have?

• processes that are identical to that of the organization doing the outsourcing.
• access to the original personnel that were on staff at the organization.
• the ability to maintain all of the applications in languages they are familiar with.
• access to the skill sets consistent with the programming languages used by the organization.

The threat modeling identifies a man-in-the-middle (MITM) exposure. Which countermeasure should the information system security officer (ISSO) select to mitigate the risk of a protected Health information (PHI) data leak?

• Auditing
• Anonymization
• Privacy monitoring
• Data retention