Your organization recently implemented two servers that act as a failover device for each other. Which security goal does this policy address?

You are tasked with improving the overall security of a database server. Which of the following is a preventive control that will assist with this goal?

You suspect that traffic in your network is being rerouted to an unauthorized router within your network. Which of the following command-line tools would help you narrow down the problem?

When you log on your online bank account you are also able to access a partner's credit card site, check-ordering services, and a mortgage site without entering your credentials again.

Which of the following does this describe?

You are tasked with configuring a switch so that it separates VoIP and data traffic.

Which of the following provides the BEST solution?

After Marge turned on her computer, she saw a message indicating that unless she made a payment, her hard drive would be formatted.

What does this indicate?

Which of the following is the LOWEST cost solution for fault tolerance?

Your organization recently suffered a loss from malware that wasn't previously known by any trusted sources.

Which of the following BEST describes this attack?

Which of the following terms refers to the concept of virtualization on an application level?

Which programming aspects are critical for secure application development process? (Select 2 answers)

The process of removing redundant entries from a database is known as:

Which of the following is an example of cryptomalware?

Which type of Trojan enables unauthorized remote access to a compromised system?

A collection of software tools used by a hacker to mask intrusion and obtain administrator-level access to a computer or computer network is known as

Which of the following refers to an undocumented (and often legitimate) way of gaining access to a program, online service, or an entire computer system?

Which password attack takes advantage of a predefined list of words?

An attack against encrypted data that relies heavily on computing power to check all possible keys and passwords until the correct one is found is known as:

You have been authorized by management to use a vulnerability scanner once every three months. What is this tool?

As part of your company's comprehensive vulnerability scanning policy, you decide to perform a passive vulnerability scan on one of your company's subnetworks. Which statement is true of this scan?

What is the goal when you passively test security controls?

Which of these is part of a scan to identify a common misconfiguration?

Which memory vulnerability is associated with multithreaded applications?

What is often the weakest link in the security chain, and represents the largest vulnerability?

Which type of vulnerability is demonstrated by a SQL injection?

Management has decided to purchase a new appliance firewall that will be installed between the public and private networks owned by your company. Which type of firewall is also referred to as an appliance firewall?

You are researching the different types of firewalls that you can install to protect your company's network and assets. Which type of firewall is most detrimental to network performance?

What kind of attack can we use with botnets?

In which of the following social engineering attack, the attacker threaten the victim to achieve the attack?

Which of the following terms is used to describe the theft of personal data from a payment card?

Which of the following protocols is used to secure communications between sender and receiver?

Joe is tuning his organization's firewall rules to prevent IP spoofing. What type of control is Joe implementing?

Your company is developing an application in which a private US-based hospital will allow patients to access their medical records online. Regardless of what other data the application handles, what kind of compliance do you already know you need to research?

Someone stole thousands of customer records from your organization's database. What aspect of security was primarily attacked?

Which of the following is a US government agency charged with developing and supporting standards used by other government organizations?

Which of the following controls primarily protect data availability?

Your company has received an email that contained a virus attached. Later, you have realized that no alarm is raised as the email security solution that your company uses didn't detect the threat. Which of the following has occurred?

Which of these best describes two-factor authentication?

A manufacturing company would like to track the progress of parts as

they are used on an assembly line. Which of the following technologies

would be the BEST choice for this task?

A Linux administrator is downloading an updated version of her Linux

distribution. The download site shows a link to the ISO and a SHA256

hash value. Which of these would describe the use of this hash value?

. Employees of an organization have received an email offering a cash

bonus for completing an internal training course. The link in the email

requires users to login with their Windows Domain credentials, but the

link appears to be located on an external server. Which of the following

would BEST describe this email?

Which of the following risk management strategies would include the

purchase and installation of an NGFW?

A member of the accounting team was out of the office for two weeks,

and an important financial transfer was delayed until they returned.

Which of the following would have prevented this delay?

Which of these protocols use TLS to provide secure communication?

Which of these threat actors would be MOST likely to attack systems for direct financial gain?

UTC 04/05/2018 03:09:15809 AV Gateway Alert

136.127.92.171 80 -> 10.16.10.14 60818

Gateway Anti-Virus Alert: XPACK.A_7854 (Trojan) blocked.

Which of the following can be observed from this log information?

Which of the following would be the BEST way to provide a website login using existing credentials from a third-party site?

The embedded OS in a company’s time clock appliance is configured to reset the file system and reboot when a file system error occurs. On one of the time clocks, this file system error occurs during the startup process and causes the system to constantly reboot. Which of the following BEST describes this issue?

Which of the following was initially designed as a stream cipher?

Which of the following is a certificate backed by a stricter identity validation process than the CA’s default?

If Alice wishes to digitally sign the message that she is sending to Bob, what key would she use to create the digital signature?

In which of the following, the server periodically verifies its own certificate status and receives a time-stamped response signed by the CA?