Question 1
Question
Which of the following elements of PKI are found in a browser's trusted root CA?
Answer
-
Private key
-
Symmetric key
-
Recovery key
-
Public key
Question 2
Question
Which of the following protocols only encrypts password packets from client to server?
Answer
-
XTACACS
-
TACACS
-
RADIUS
-
TACACS+
Question 3
Question
Where are revoked certificates stored?
Answer
-
Recovery agent
-
Registration
-
Key escrow
-
CRL
Question 4
Question
DRPs should contain which of the following?
Answer
-
Hierarchical list of non-critical personnel
-
Hierarchical list of critical systems
-
Hierarchical access control lists
-
Identification of single points of failure
Question 5
Question
A system administrator could have a user level account and an administrator account to prevent:
Question 6
Question
Which of the following is the BEST way to mitigate data loss if a portable device is compromised?
Question 7
Question
Which of the following protocols should be blocked at the network perimeter to prevent host enumeration by
sweep devices?
Question 8
Question
Which of the following is specific to a buffer overflow attack?
Answer
-
Memory addressing
-
Directory traversal
-
Initialization vector
-
Session cookies
Question 9
Question
Which of the following asymmetric encryption keys is used to encrypt data to ensure only the intended recipient
can decrypt the ciphertext?
Answer
-
Private
-
Escrow
-
Public
-
Preshared
Question 10
Question
Which of the following should a security administrator implement to prevent users from disrupting network
connectivity, if a user connects both ends of a network cable to different switch ports?
Answer
-
VLAN separation
-
Access control
-
Loop protection
-
DMZ
Question 11
Question
A new enterprise solution is currently being evaluated due to its potential to increase the company's profit
margins. The security administrator has been asked to review its security implications. While evaluating the
product, various vulnerability scans were performed. It was determined that the product is not a threat but has
the potential to introduce additional vulnerabilities. Which of the following assessment types should the security
administrator also take into consideration while evaluating this product?
Answer
-
Threat assessment
-
Vulnerability assessment
-
Code assessment
-
Risk assessment
Question 12
Question
Which of the following requires special handling and explicit policies for data retention and data distribution?
Question 13
Question
Centrally authenticating multiple systems and applications against a federated user database is an example of:
Answer
-
smart card
-
common access card
-
single sign-on
-
access control list
Question 14
Question
WEP is seen as an unsecure protocol based on its improper implementation and use of which of the following?
Question 15
Question
Which of the following should be performed if a smartphone is lost to ensure no data can be retrieved from it?
Answer
-
Device encryption
-
Remote wipe
-
Screen lock
-
GPS tracking
Question 16
Question
In an 802.11n network, which of the following provides the MOST secure method of both encryption and
authorization?
Answer
-
WEP with 802.1x
-
WPA Enterprise
-
WPA2-PSK
-
WPA with TKIP
Question 17
Question
Which of the following methods of access, authentication, and authorization is the MOST secure by default?
Answer
-
Kerberos
-
TACACS
-
RADIUS
-
LDAP
Question 18
Question
Which of the following facilitates computing for heavily utilized systems and networks?
Answer
-
Remote access
-
Provider cloud
-
VPN concentrator
-
Telephony
Question 19
Question
With which of the following is RAID MOST concerned?
Answer
-
Integrity
-
Confidentiality
-
Availability
-
Baselining
Question 20
Question
Which of the following reduces the likelihood of a single point of failure when a server fails?
Answer
-
Clustering
-
Virtualization
-
RAID
-
Cold site
Question 21
Question
A user downloads a keygen to install pirated software. After running the keygen, system performance is
extremely slow and numerous antivirus alerts are displayed. Which of the following BEST describes this type of
malware?
Answer
-
Logic bomb
-
Worm
-
Trojan
-
Adware
Question 22
Question
Which of the following is used in conjunction with PEAP to provide mutual authentication between peers?
Answer
-
LEAP
-
MSCHAPv2
-
PPP
-
MSCHAPv1
Question 23
Question
A targeted email attack sent to the company's Chief Executive Officer (CEO) is known as which of the
following?
Answer
-
Whaling
-
Bluesnarfing
-
Vishing
-
Dumpster diving
Question 24
Question
Which of the following uses TCP port 22 by default?
Answer
-
SSL, SCP, and TFTP
-
SSH, SCP, and SFTP
-
HTTPS, SFTP, and TFTP
-
TLS, TELNET, and SCP
Question 25
Question
Actively monitoring data streams in search of malicious code or behavior is an example of:
Answer
-
load balancing
-
an Internet proxy
-
URL filtering
-
content inspection
Question 26
Question
A user is no longer able to transfer files to the FTP server. The security administrator has verified the ports are
open on the network firewall. Which of the following should the security administrator check?
Answer
-
Anti-virus software
-
ACLs
-
Anti-spam software
-
NIDS
Question 27
Question
A Human Resource manager is assigning access to users in their specific department performing the same job
function. This is an example of:
Answer
-
role-based access control
-
rule-based access control
-
centralized access control
-
mandatory access control
Question 28
Question
Which of the following BEST describes the process of key escrow?
Answer
-
Maintains a copy of a user's public key for the sole purpose of recovering messages if it is lost
-
Maintains a secured copy of a user's private key to recover the certificate revocation list
-
Maintains a secured copy of a user's private key for the sole purpose of recovering the key if it is lost
-
Maintains a secured copy of a user's public key in order to improve network performance
Question 29
Question
Which of the following network devices would MOST likely be used to detect but not react to suspicious
behavior on the network?
Question 30
Question
Which of the following is an example of allowing a user to perform a self-service password reset?
Answer
-
Password length
-
Password recovery
-
Password complexity
-
Password expiration
Question 31
Question
Which of the following wireless attacks uses a counterfeit base station with the same SSID name as a nearby
intended wireless network?
Answer
-
War driving
-
Evil twin
-
Rogue access point
-
War chalking
Question 32
Question
A security administrator finished taking a forensic image of a computer's memory. Which of the following should
the administrator do to ensure image integrity?
Answer
-
Run the image through AES128
-
Run the image through a symmetric encryption algorithm
-
Compress the image to a password protected archive
-
Run the image through SHA256
Question 33
Question
Which of the following BEST explains the security benefit of a standardized server image?
Answer
-
All current security updates for the operating system will have already been applied
-
Mandated security configurations have been made to the operating system
-
Anti-virus software will be installed and current
-
Operating system license use is easier to track
Question 34
Question
Which of the following is the primary purpose of using a digital signature? (Select TWO)
Answer
-
Encryption
-
Integrity
-
Confidentiality
-
Non-repudiation
-
Availability
Question 35
Question
Which of the following must a security administrator do when the private key of a web server has been
compromised by an intruder?
Answer
-
Submit the public key to the CRL
-
Use the recovery agent to revoke the key
-
Submit the private key to the CRL
-
Issue a new CA
Question 36
Question
The security administrator often observes that an employee who entered the datacenter does not match the
owner of the PIN that was entered into the keypad. Which of the following would BEST prevent this situation?
Question 37
Question
A programmer allocates 16 bytes for a string variable, but does not adequately ensure that more than 16 bytes
cannot be copied into the variable. This program may be vulnerable to which of the following attacks?
Answer
-
Buffer overflow
-
Cross-site scripting
-
Session hijacking
-
Directory traversal
Question 38
Question
An administrator is updating firmware on routers throughout the company. Where should the administrator
document this work?
Answer
-
Event Viewer
-
Router's System Log
-
Change Management System
-
Compliance Review System
Question 39
Question
The fundamental difference between symmetric and asymmetric key cryptographic systems is that symmetric
key cryptography uses:
Answer
-
multiple keys for non-repudiation of bulk data
-
different keys on both ends of the transport medium
-
bulk encryption for data transmission over fiber
-
the same key on each end of the transmission medium
Question 40
Question
Which of the following allows a user to have a one-time password?
Answer
-
Biometrics
-
SSO
-
PIV
-
Tokens
Question 41
Question
Which of the following allows a security administrator to set device traps?
Question 42
Question
Which of the following is the BEST way to secure data for the purpose of retention?
Answer
-
Off-site backup
-
RAID 5 on-site backup
-
On-site clustering
-
Virtualization
Question 43
Question
In which of the following locations would a forensic analyst look to find a hooked process?
Answer
-
BIOS
-
Slack space
-
RAM
-
Rootkit
Question 44
Question
Several classified mobile devices have been stolen. Which of the following would BEST reduce the data
leakage threat?
Answer
-
Use GPS tracking to find the devices
-
Use stronger encryption algorithms
-
Immediately inform local law enforcement
-
Remotely sanitize the devices
Question 45
Question
Which of the following is an example of requiring users to have a password of 16 characters or more?
Answer
-
Password recovery requirements
-
Password complexity requirements
-
Password expiration requirements
-
Password length requirements
Question 46
Question
Which of the following devices provides storage for RSA or asymmetric keys and may assist in user
authentication? (Select TWO)
Question 47
Question
A small company needs to invest in a new expensive database. The company's budget does not include the
purchase of additional servers or personnel. Which of the following solutions would allow the small company to
save money on hiring additional personnel and minimize the footprint in their current datacenter?
Question 48
Question
A security administrator needs to implement a site-to-site VPN tunnel between the main office and a remote
branch. Which of the following protocols should be used for the tunnel?
Question 49
Question
When examining HTTP server logs the security administrator notices that the company's online store crashes
after a particular search string is executed by a single external user. Which of the following BEST describes this
type of attack?
Question 50
Question
Which of the following MUST a programmer implement to prevent cross-site scripting?
Answer
-
Validate input to remove shell scripts
-
Validate input to remove hypertext
-
Validate input to remove batch files
-
Validate input to remove Java bit code