PART 1

Which of these attacks take advantage of inadequate input validation in websites?

• Phishing

• Trojans

• Cross-Site Scripting

• Rootkits

An organization needs a network security tool that detects and acts in the event of malicious activity. Which of these tools will BEST meet their needs?

• Router

• IPS

• IDS

• Firewall

In a DAC policy scenario, which of these tasks can only be performed by a subject granted access to information?

• Changing security attributes

• Reading the information

• Executing the information

• Modifying the information

In the event of non-compliance, which of these can have considerable financial consequences for an organization?

• Policies

• Regulations

• Guidelines

• Standards

What does the term LAN refer to?

• A tool to manage and control network traffic, as well as to protect a network.

• A network on a building or limited geographical area

• A device that connects multiple other devices in a network

• A long-distance connection between geographically-distant networks

Which of these is a type of corrective security control?

• Patches

• Intrusion detection systems

• Guidelines

• Encryption

Which of these enables point-to-point online communication over an untrusted network?

• VLAN

• Firewall

• Router

• VPN

At which of the OSI layers do TCP and UDP work?

• Transport Layer

• Session Layer

• Application Layer

• Physical Layer

Which is the PRIMARY focus of the ISO 27002 standard?

• Health Insurance Portability and Accountability Act (HIPAA)

• Information Security Management System (ISMS)

• Risk Management

• Application Security

Which of these different sub-masks will allow 30 hosts?

• /26

• /30

• /27