A critical web server is compromised by a persistent XSS attack. Which two steps would you take as part of the containment process? (Choose Two)

A company is concerned that accessing data from an Active Directory domain is not secure, Which protocol should you implement?

You want to use a backup scheme that does not take too much time or require very high capacity tapes each right. Because you don not have to restore data that often, you do not care if the restore process is lengthier as a result, but you do not want it to take an unreasonable amount of time. Which of the following would be the best backup scheme to meet your goals?

You receive a security bulletin that a patch is available for an application running on all network client computers. The application is a mission-critical application. You download the patch to a directory on a network server. What should you do next?

All computers in your organization come with TPM installed. What type of data encryption most often uses keys generated from the TPM?

Which is BEST described as a type of compensating control?

A company wants to open a new office. Both offices have a reliable link to the internet. The company has provided the following requirements for this project:

• All communication between the two sites has to be protected and secures using AES
• Implement a solution to prevent theft of company data from the inside

Which solution should you recommend?

Users report that an application is failing and displaying detailed messaging including stack traces, data dumps, and detailed codes. This results from what type of vulnerability?

A company deploys a DLP system. A security officer wants to create a policy to match and block access to documents that include any linked PII. Which three of the following should be included?

A company wants to introduce EAP to secure all WLAN connections. The solution has to use mutual authentication and a valid certificate for the client and the server. Which protocol should the company implement to meet theses requirements?

A company has a fully functional wireless network with a single SSID and two standalone access points using WPA2-PSK. The company wants to add a new SSID that will be isolated from the existing SSID. A new IP range will be introduced. Which solution BEST supports that deployment

A company wants to install a VOIP system internally and between two branch offices. Which two technologies will assist in a secure deployment?

What are two advantages of implementing a vendor diversity policy?

Which two attacks are DoS attacks against a Wi-Fi network?

You want to deploy a centralized authentication structure that can be used to authenticate routers, servers, and switches. You want this structure to be as secure as possible. What should you use?

An organization has determined it can tolerate a maximum of three hours of downtime. Which of the following has been specified?

Which of the following types of keys is found in a key escrow?

A network administrator wants to implement a method of securing internal routing. Which of the following should the administrator implement?

A security administrator is developing controls for creating audit trails and tracking if a PHI data breach is to occur. The administrator has been given the following

requirements:

-All access must be correlated to a user account.

-All user accounts must be assigned to a single individual.

-User access to the PHI data must be recorded.

-Anomalies in PHI data access must be reported.

-Logs and records cannot be deleted or modified.

Which of the following should the administrator implement to meet the above requirements? (Select three.)

Which of the following encryption methods does PKI typically use to securely project keys?

A department head at a university resigned on the first day of the spring semester. It was subsequently determined that the department head deleted numerous files

and directories from the server-based home directory while the campus was closed. Which of the following policies or procedures could have prevented this from

occurring?

A security administrator has found a hash in the environment known to belong to malware. The administrator then finds this file to be in in the preupdate area of the

OS, which indicates it was pushed from the central patch system.

File: winx86_adobe_flash_upgrade.exe

Hash: 99ac28bede43ab869b853ba62c4ea243

The administrator pulls a report from the patch management system with the following output:

Given the above outputs, which of the following MOST likely happened?

A network administrator at a small office wants to simplify the configuration of mobile clients connecting to an encrypted wireless network. Which of the following

should be implemented in the administrator does not want to provide the wireless password or he certificate to the employees?

When configuring settings in a mandatory access control environment, which of the following specifies the subjects that can access specific data objects?

A high-security defense installation recently begun utilizing large guard dogs that bark very loudly and excitedly at the slightest provocation. Which of the following

types of controls does this BEST describe?

A company’s user lockout policy is enabled after five unsuccessful login attempts. The help desk notices a user is repeatedly locked out over the course of a

workweek. Upon contacting the user, the help desk discovers the user is on vacation and does not have network access. Which of the following types of attacks are

MOST likely occurring? (Select two.)

A company performs information classification. What is the outcome of this process?

A server has failed four times in the past year. Which measurement is used to determine the amount of time the serer was operational?