New Focus Questions: Detail View

1)

Which of the following application attacks is identified by use of the tag? Cross-script

XSS:a vulnerability in web applications which attackers may exploit to steal users' information

2)

Which of the following would most likely be implemented in order to prevent employees from accessing certain websites?

Proxy Server: is a server (a computer system or an application) that acts as an intermediary for requests from clients seeking resources from other servers. A client connects to the proxy server, requesting some service, such as a file, connection, web page, or other resource available from a different server. The proxy server evaluates the request according to its filtering rules. For example, it may filter traffic by IP Address or protocol. If the request is validated by the filter, the proxy provides the resource by connecting to the relevant server and requesting the service on behalf of the client. A proxy server may optionally alter the client's request or the server's response, and sometimes it may serve the request without contacting the specified server. In this case, it caches responses from the remote server, and returns subsequent requests for the same content directly.

3)

Which of the following would Matt, a security administrator, use to encrypt transmissions from an internal database to an internal server, keeping in mind that the encryption process must add as little latency to the process as possible?

3DES: In cryptography, Triple DES is the common name for the Triple Data Encryption Algorithm (TDEA or Triple DEA) block cipher, which applies the Data Encryption Standard (DES) cipher algorithm three times to each data block.

4)

Matt, a security administrator, wants to implememnt a secure wireless network. Which of the following is the MOST secure wireless protocol?

WPA2:WPA2 has replaced WPA. WPA2, which requires testing and certification by the Wi-Fi Alliance, implements the mandatory elements of IEEE 802.11i. In particular, it introduces CCMP, a new AES-based encryption mode with strong security

5)

Which of the following would Sara, a security administrator, implement to divert and analyze attacks?

Honeypot: In computer terminology, a honeypot is a trap set to detect, deflect, or in some manner counteract attempts at unauthorized use of information systems. Generally it consists of a computer, data, or a network site that appears to be part of a network, but is actually isolated and monitored, and which seems to contain information or a resource of value to attackers.

6)

Matt, a security administrator, has noticed that the website and extrernal systems have been subject to many attack attempts. To verify integrity of the website and critical files, Matt should:

Create file hashes for website and critical system files, and compare the current file hahes to the baseline at regular time intervals

7)

In which of the following access control types does the operating system data classification determine who has access to certain resources?

Mandatory Access Control:In computer security, mandatory access control (MAC) refers to a type of access control by which the operating system constrains the ability of a subject or initiator to access or generally perform some sort of operation on an object or target

8)

Which of the following authentication protocols forces centralized wireless authentication?

WPA2-Enterprise:WPA2 has replaced WPA. WPA2, which requires testing and certification by the Wi-Fi Alliance, implements the mandatory elements of IEEE 802.11i. In particular, it introduces CCMP, a new AES-based encryption mode with strong security. Certification began in September, 2004; from March 13, 2006, WPA2 certification is mandatory for all new devices to bear the Wi-Fi trademark.

9)

Which of the following is used by Matt, a security administrator, to lower the risks associated with electrostatic discharge, corrosion, and thermal breakdown?

Temperature and humidity controls

10)

Which of the following has a defauly port of 22?

SSH:Secure Shell (SSH) is a network protocol for secure data communication, remote shell services or command execution and other secure network services between two networked computers that it connects via a secure channel over an insecure network: a server and a client (running SSH server and SSH client programs, respectively).

11)

Hashing algorithms are used to address which of the following?

Integrity

12)

An injection vulnerability can be caused by which of the following?

Improper input validation Injection: An injection is often used to attack the security of a website by inputting statements in a web form to get a badly designed website to perform operations on the database (often to dump the database content to the attacker) other than the usual operations as intended by the designer

13)

Which of the following detection methods may generate an alert when Matt, an employee, accesses a server during non-business hours?

Behavioral

14)

The health care department is storing files with names, addresses, and social security number on a corporate file server. Matt the security analyst, comes across this data in an audit. Which of the following has Matt discovered?

Personal identifiable information PII

15)

Sara, a user, needs to copy a file from a Linux workstation to a Linux server using the MOST secure file transfer method available. Which of the folowing protocols would she use?

SCP:is a means of securely transferring computer files between a local and a remote host or between two remote hosts. It is based on the Secure Shell (SSH) protocol.

16)

Which of the following ports would be blocked if Pete, a security administrator, wants to disable FTP?

21:File Transfer Protocol (FTP) is a standard network protocol used to transfer files from one host to another host over a TCP-based network, such as the Internet. To establish an FTP session, clients initiate a connection to an FTP server that listens on TCP port 21 by default. FTP servers respond with messages that prompt the client for FTP login credentials (username and password). FTP servers do not, however, send files from port number 21. Instead, the FTP protocol allows for a second connection to be established for data transfer after the control connection is established. Note that only FTP servers use port 21, not FTP clients.

17)

Which of the following is a best practice when securing a switch from physical access?

Disable unused ports

18)

Which of the following attacks is characterized by Sara attempting to send an email from a Chief Information Officer's (CIO's) non corporate email account to an IT staff member in order to have a password changed?

Impresonation

19)

Which of the following allows multiple internal IP address to be mapped to one specific external IP address?

PAT: Port Address Translation (PAT), is an extension to network address translation (NAT) that permits multiple devices on a local area network (LAN) to be mapped to a single public IP address. The goal of PAT is to conserve IP addresses.

20)

Employees are reporting that they are receiving unusual calls from the help desk for the purpose of verifiying their user credentials. Which of the following attack types is occuring?

Vishing:is the criminal practice of using social engineering over the telephone system, most often using features facilitated by Voice over IP (VoIP), to gain access to private personal and financial information from the public for the purpose of financial reward

21)

Jane a security technician needs to open ports on a firewall to allow for domain name resolution. Which of the following ports should Jane open (TWO)?

TCP 53 (Zone Transfer), and UDP 53 (Resources Requests)Refers to Domain Name Systems

22)

Which of the following security tools can Jane, an administrator implement to mitigate the risks of theft?

Device encryption:Device encryption refers to the ability to protect local device data from offline hardware attacks by employing encryption. This is achieved by employing a file-based encryption filter. The master key for the encryption is protected with the user’s device lock PIN. When device encryption is enabled, during bootup the user is prompted to enter the PIN.

23)

In order to prevent users from surfing the web at work, Jane the administrator should block which of the following ports?

TCP 80 and TCP 443TCP 80- HTTP portTCP 443- HTTPS Hypertext Transfer Protocol over SSL/TLS

24)

Which of the following password policies is the most effective against a brute force network attack?

Account lockout

25)

Sara a user on a public WI-FI network logs into a webmail account and is redirected to a search engine. Which of the following attacks maybe occuring?

Evil Twin: Evil twin is a term for a rogue Wi-Fi access point that appears to be a legitimate one offered on the premises, but actually has been set up by a hacker to eavesdrop on wireless communications among Internet surfers. Evil twin is the wireless version of the phishing scam. An attacker fools wireless users into connecting a laptop or mobile phone to a tainted hotspot by posing as a legitimate provider.

26)

Mandatory cavation, job rotation and seperation of duties policies all enhance the overall security posture by doing which of the following?

Making it more difficult to hide the malicious activity by insiders

27)

Which of the following is the MOST secure protocol for Pete an administrator to use for managing network devices?

SSH:Secure Shell (SSH) is a network protocol for secure data communication, remote shell services or command execution and other secure network services between two networked computers that it connects via a secure channel over an insecure network: a server and a client (running SSH server and SSH client programs, respectively).

28)

Matt a network engineer is setting up an IPSEC VPN. Which network layer key management standard and its protocol can be used to negatiate the connection?

IKE:Internet Key Exchange is the protocol used to set up a security association (SA) in the IPsec protocol suite. IPSec: Internet Protocol Security (IPsec) is a protocol suite for securing Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. VPN: Virtual Private Network

29)

Jane a user has reported an increase in email phising attempts. Which of the following can be implemented to mitigate the attacks?

Anti-Spam

30)

In PKI, the public key is used to:

Encrypt an email message

31)

Which of the following security controls enforces user permissions based on a job role?

Group based privleges

32)

Sara a security administrator is implememting remote management for network infastructure using an SNMP. Which of the following statements is true about SNMP?

Write communitities allows both read and write permissionsSNMP: Simple Network Management Protocol (SNMP) is an "Internet-standard protocol for managing devices on IP networks. Devices that typically support SNMP include routers, switches, servers, workstations, printers, modem racks, and more."It is used mostly in network management systems to monitor network-attached devices for conditions that warrant administrative attention.

33)

Which of the following is best associated with PKI?Private keyBlock CiphersStream ciphersNTLMv2

Private Key

34)

An application company sent out a software patch for one of their applications on monday. The company has been receiving reports about intrusion attacks from their customers on Tuesday. Which of the following attacks does this describe.

Zero Day

35)

Which of the following is based on X.500 standards?

LDAP: The Lightweight Directory Access Protocol (LDAP; is an application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network.LDAP is defined in terms of ASN.1 and transmitted using BER Directory services may provide any organized set of records, often with a hierarchical structure, such as a corporate electronic mail directory. Similarly, a telephone directory is a list of subscribers with an address and a phone number.X.500: X.500 is a series of computer networking standards covering electronic directory services

36)

Sara an attacker is recording a person typing the their ID number into a keypad to gain access to the building. Sara then calls the helpdesk and informs them that their PIN no longer works and would like to change it. Which of the following attacks occured last?

Impersonation

37)

Whihc of the following forms of FTP uses TLS to securely send information?

FTPS: FTPS (also known as FTP Secure and FTP-SSL) is an extension to the commonly used File Transfer Protocol(FTP) that adds support for the Transport Layer Security(TLS) and the Secure Sockets Layer (SSL) cryptographic protocols.

38)

The human resources department of a company has requested full access to all network resources, including those of the financial department. Jane the administrator denies this citing?

Seperation of Duties

39)

Pete a network administrator impliments the spanning tree protocol on network switches. Which of the following issues does this address?

Loop Protection: The Spanning Tree Protocol (STP) is a network protocol that ensures a loop-free topology for any bridged Ethernet local area network. The basic function of STP is to prevent bridge loops and the broadcast radiation that results from them. Spanning tree also allows a network design to include spare (redundant) links to provide automatic backup paths if an active link fails, without the danger of bridge loops, or the need for manual enabling/disabling of these backup links.

40)

Which of the following administrative controls best mitigates the risk of ongoing inappropriate employee activities in sensative areas?

Mandatory Vacations

41)

Which of the following is an authentication service that users symmetrical keys and tickets?

Kerberos:is a computer network authentication protocol which works on the basis of "tickets" to allow nodes communicating over a non-secure network to prove their identity to one another in a secure manner. Its designers aimed primarily at a client–server model, and it provides mutual authentication—both the user and the server verify each other's identity. Kerberos protocol messages are protected against eavesdropping and replay attacks. Kerberos builds on symmetric key cryptography and requires a trusted third party, and optionally may use public-key cryptography by utilizing asymmetric key cryptography during certain phases of authentication. Kerberos uses port 88 by default.

42)

Which of the following could Sara an administrator use in a workplace to remove sensative data at rest from the premises?

Peronally owned devices

43)

Which of the following functions of a firewall allows Pete an administrator to map an external service to an internal host?

Port Forwarding:

44)

Matt a corporate user has volunteered to particiapite in a test group for full disk encryption on employees laptops. After his laptop's hard drive has been fully encrypted, the network administrator is still able to access Matt's files across a SMB share. Which of the following is the MAIN reason why the files are still accessible to the administrator?

Full dis encytption only secures files when the laptop is powered off

45)

A company notices that there is a flaw in one of their proprietary programs that the comapny runs in house. The flaw could cause damage to the HVAC system. Which of the following would the company transfer to an insurance company?

Risk

46)

Sara a security analyst discovers which operating systems the client devices on the network are running by only monitoring a mirror on the router. Which of the following techniques did Sara use?

Passive finger printing

47)

To protect corporate data on removable media a security policy should mandate that all removable devices use which of the following?

Full Disk encryption

48)

Which of the following elements makes up the standard equation used to define risk (TWO)

Impact and Likelihood

49)

Sara and administrator suspects a denial of service attack on the network, but doesn't know where the network traffic is coming from or what type of traffic it is. Which of the following would help Sara further asses the situation?

Protocol Analyzer:A "Protocol analyzer" is a tool (hardware or software) used to capture and analyze signals and data traffic over a communication channel.

50)

Matt a security administrator needs to Telnet into a router to change some configuration. Which of the following ports need to be open to allow Matt to change the configuration?

23:Telnet Protocol-—unencrypted text communications

51)

Matt a forensic analyst wants to obtain the digital fingerprint for a given message. The message is 160-bits long. Which of the following hashing methods would Matt have to use to obtain this digital fingerprint?

SHA1 SHA-1 produces a 160-bit message digest based on principles similar to those used by Ronald L. Rivest of MIT in the design of the MD4 and MD5 message digest algorithms, but has a more conservative design.

52)

Sara the software security engineer is trying to detect issues that could lead to buffer overflows or memory leaks in the comapy software. Which of the following would help Sara automate this detection?

Fuzzing:is a software testing technique, often automated or semi-automated, that involves providing invalid, unexpected, or random data to the inputs of a computer program. The program is then monitored for exceptions such as crashes or failing built-in code assertions. Fuzzing is commonly used to test for security problems in software or computer systems

53)

Which of the following should be implimented to secure Pete'sa network administrator, day to day maintenance activities? (TWO)

TACACS+ and SSHTACACS+: (Terminal Access Controller Access-Control System Plus) is an access control network protocol for routers, network access servers and other networked computing devices. Unlike RADIUS and the predecessors of TACACS+ (TACACS and XTACACS), TACACS+ provides separate authentication, authorization and accounting services. Like RADIUS, TACACS and XTACACS, TACACS+ is an open, publicly documented protocol.SSH: Secure Shell (SSH) is a network protocol for secure data communication, remote shell services or command execution and other secure network services between two networked computers that it connects via a secure channel over an insecure

54)

Which of the following would be the best choice for attacking a complex password hash?

Rainbow Tables:A rainbow table is a precomputed table for reversing cryptographic hash functions, usually for cracking password hashes. Tables are usually used in recovering the plaintext password, up to a certain length consisting of a limited set of characters.

55)

Jane a security technicain needs to develop access controls for the network. In which of the following access control types does a user determine who has access to certain network resources?

Discretionary Access Control

56)

Which of the following utilizes the ECHO function of Internet Control Message Protocol (ICMP) to overwhelm a victim's system?

Smurf Attack:is a way of generating significant computer network traffic on a victim network. This is a type of denial-of-service attack that floods a target system via spoofed broadcast ping messages. This attack relies on a perpetrator sending a large amount of ICMP echo request (ping) traffic to IP broadcast addresses, all of which have a spoofed source IP address of the intended victim. If the routing device delivering traffic to those broadcast addresses delivers the IP broadcast to all hosts (for example via a layer 2 broadcast), most hosts on that IP network will take the ICMP echo request and reply to it with an echo reply, multiplying the traffic by the number of hosts responding. On a multi-access broadcast network, hundreds of machines might reply to each packet.

57)

Sara a security administrator needs to simplify the management of access to remote files and folders. Which of the following can she implement to best accomplish this?

Group based ACL's

58)

Which of the following authentication services relies on a shared secret?

Radius: Remote Authentication Dial In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for computers to connect and use a network service. RADIUS was developed by Livingston Enterprises, Inc., in 1991 as an access server authentication and accounting protocol and later brought into the Internet Engineering Task Force (IETF) standards. Because of the broad support and the ubiquitous nature of the RADIUS protocol, it is often used by ISPs and enterprises to manage access to the Internet or internal networks, wireless networks, and integrated e-mail services. These networks may incorporate modems, DSL, access points, VPNs, network ports, web servers, etc.

59)

While Sara is logging into the server from her workstation, she notices Pete watching her enter the username and password. Which of the following social engineering attacks is Pete executing?

Soulder Surfing. Tailgating is wrong, this is another type of attack.

60)

Which of the following is the MAIN benefit of server side versus client side input validation?

Server side input validation in a more secure system than client side input validation.

61)

Sara and Jane, users, are reporting an increase in the amount of unwanted email that they are receiving each day. Which of the following would be the best way to respond to this issue creating a lot of administrative overhead?

Deploy an anti-spam device to protect the network

62)

Which of the following is characterized by an attack against a moble device?

Blue Jacking:is the sending of unsolicited messages over Bluetooth to Bluetooth-enabled devices such as mobile phones, PDAs or laptop computers, sending a vCard which typically contains a message in the name field (i.e., for bluedating or bluechat) to another bluetooth enabled device via the OBEX protocol.

63)

Which of the following protocols allows for the LARGEST address space?

IPV6:

64)

Which of the following procedures would be used to mitigate the risk of an internal developer embedding malicious code in a production system?

Change management

65)

Jane a user, word processing software is exhibiting strange behavior, opening and closing itself at random intervals. There is no other strange behavior on the system. Which of the following would mitigate this problem in the future?

Install application updates

66)

Pete a user, submitted a form on the Internet but received an unexpected response shown belowServer Error in "/" ApplicationRuntime error in script on asp.net 2.0Which of the follwong controls should be put into place to prevent Pete from learning this information about the web server in in the future?

Error handling

67)

Jane's guest, Pete comes to her office to meet her for lunch. She uses her encoded badge to enter and he follows in behind her. This is an example of which of the following?

Tailgating

68)

In the event of a mobile device being lost or stolen which of the following BEST protects against sensative information leakage?

Remote Wipe

69)

Which of the following best describes a denial of service attack?

Sara the attacker overwhelms a system or application causing it to crash and bring the server down to cause an outage

70)

Which of the following data loss prevention strategies mitigates the risk of replacing hard drives that cannot be sanitized

Full disk encryption

71)

When used alone which of the follwing controls mitigates the risk of Sara an attacker launching online brute force password attack?

Account lockout

72)

Which of the following security tools can jane a security administrator use to deter theft?

Cable Locks

73)

Which of the following is BEST utlized to actively test security controls on a particular system?

Penetration Test

74)

A company has sent all of its private keys to a third party. The third party has created a list of these keys. Which of the following has been implimented?

Key Escrow

75)

Companies allowing remote access to internal systems or systems containing sensative data should provide access using?

VPN with two factor authentication

76)

Sara, a security engineer is testing encryption ciphers for performace. Which of the follwoing ciphers offers strong encryption?

Blowfish

77)

Which of the following can matt an administrator use to ensure the confidentiality of a file when it's being sent over FTP?

PGP

78)

Which of the following attacks would be used if Sara a user is receiving unwanted text messages?

Blue jacking

79)

Which of the following should be done before resetting a users password due to expiration?

Verify the users identity

80)

In order for Pete a user to logon to his desktop computer he must provide his username, password, and use a common access card with a PIN. Which of the following authentication methods is Pete using?

Two Factor

81)

Which of the following is the proper order for incident response?

Preperation, detection, containment, eradication, recovery

82)

Which of the following technologies would allow the removal of a single point of failure?

Dual a homing server

83)

Pete a security admin wants to secure remote telnet services and decides to user the services over SSH. Which of the following ports should Pete allow on the firewall by default?

22

84)

Pete a user is having trouble dialing into the network from their house. The admin checks the RADIUS server, the switch connected to the server, and finds that the switch lost configuarion after a recent power outage. The administrator replaces the switch and is able to ping the switch, but not the RADIUS server. Which of the following is the most likely cause?

VLAN mismatch occuring

85)

An application programmer reports to Sara the security admin that the antivirus software installed on a server is interfering with one of the production HR applications and requests that antivirus be temporarily turned off. How should Sara respond to this request?

Ask the programmer to replicate the problem in a test environment.

86)

Which of the following will help Matt and admin mitigate the risk of static electricty?

Humidity controls

87)

Which of the following host security procedures will facilitate in the identification of advanced persistent threats?

Host software baselining

88)

Jane the admin is tasked with deploying a strong encryption cipher. Which of the following ciphers would she be the least likely to choose?

Two Fish

89)

Hashing and encryption provide for which of the following? (TWO)AuthenticationAvailabilityIdentificationConfidentiallityAuthorizationIntegrity

ConfidentialityInegrity

90)

Which of the following control types is video monitoring?

Detective

91)

Pete is reporting an excessive amount of junk mail on the network email server. Which of the following would ONLY reduce the amount of unauthorized mail?

Spam Filters

92)

Which of the following is mainly used for remote access into the network?

RADIIUS

93)

Sara a security analyst suspects that a rogue web server is running on the network. Which of the following would MOST likely be used to identify the server's IP address?

Port Scanner

94)

Speaking a passphrase into a voice print analyzer is an example of which of the following security concepts?

Two Factor authentication

95)

Sara the security engineer has discovered that a breach is in progress non production system of moderate importance. Which of the following should Sara collect first?

Memory dump, ARP cache

96)

Which of the following describes separating encryption keys into multiple parts to store with trusted third parties?

Key escrow

97)

Which of the following impliments two factor authentication based on something you know and something you have?

The system shall require users to authentication to the system with a combination of a password or PIN and a smartcard

98)

The log management system at Company A is inadequate to meet the standards required by their corporate government team. A new automated logmanagement system has been put in place. This is an example of which of the following?

Continuos monitoring

99)

Which of the following would allow Pete, a security analyst to assess his company proficiency with a particular security process?

Capability Maturity Model

100)

Which of the following should Jane, the security administrator, do first when an employee reports the loss of a corporate mobile device?

Remotely initiate a device wipe

101)

A company is installing a wireless network in a building that houses several tenants. Which of the following should be considered to amke sure none of the other tenants can detenct the comapnies wireless network? Select TWOStatic IP addressesWireless encryptionMAC FilteringAntenna placementPower levels

Antenna PlacementPower Levels

102)

Which of the following is the best solution to securely administer remote servers?

SSH

103)

Which of the following should be implemented to restrict wireless access to the hardware of a NIC?

MAC Filtering

104)

Which of the following is jane a security administrator most likely implementing when deleted all the unneeded files and modules of a newly installed application?

Application Hardening

105)

Saraa security admin has generated a key pair for the company web server. Which of the following should she do next to ensure all web traffic to the company server is encrypted?

Install both the private and public key on the web server

106)

Traffic has stopped flowing to and from the company network after the inline IPS hardware failed. Which of the follwoing has occured?

Failsafe

107)

Which of the following wireless attacks MOST likely targets a smart phone?

Bluesnarfing

108)

Which of the following is an attack where Pete spreads the USB thumb drives thoughout a banks partking lot in order to have malware installed on the banking systems?

Social Engineering

109)

Matt's CRL is over 6 months old. Which of the following could Matt do in order to ensure he has the current information?Update the CRLChange the trust modelDeploy a key escrowQuery the intermediate CADeploy a recovery agentDeploy OCSP

Update the CRLDeploy OCSP

110)

Which of the following malware types is best described as potecting itself by hooking a system processes and hiding its presence?

Rootkit

111)

Which of the following mulitfactor authentication methods uses biometrics?

Something you are

112)

The chief security officer (CSO) informs Jane the technician that there is a new requirement for all data repositories where data must be encrypted when not in use. The CSO wants Jane to apply this requirement to all corporate servers, which of the following data encryption types will best fill this requirement?

Database encryption

113)

Sara a security admin suspects that a web server maybe under attach. The web logs have several entries containing variations of the following entries.'or1=1or1'=1--'or1=1'__Which of the following attacks is most likely occuring?

Injection

114)

Which of the following best describes a software vulnerability that is actively being used by Sara and Jane, attackers, before the vendor releases a proactive patch or update?

Zero day attack

115)

Which of the following is a policy that would force all users to organize their areas as well as help in reducing the risk of possible data theft?

Clean Desk policy

116)

Sara, a user in the human resources department, requests a privacy screen for her monitor at work. Which of the following social engineering attack is Sara attampting to prevent?

Shoulder surfing

117)

Jane an attacker compromises a payroll system and replaces a commonly executed application with a modified verzion which appears to run as normal but also executes additional functions. Which of the following would best describe the slightly modified application?

Trojan

118)

Broadcast traffic is having a negative impact on network performance. Which of the following might help minimize this issue?

Sperate the network into a number of different VLANs

119)

While traveling Matt an employee decides he would like to download some new movies onto his corporate laptop. While installing software designed to download movies from multiple computers across the internet. Matt agrees to share portions of his hard drive. This scenario describes one of the threats involved in which of the following technologies?

P2P

120)

Pete the security admin would like all users connecting to the corporate SSL VPN router to have up to date patches and antivirus signatures verified prior to accessing the internal network. Which of the following would most likely be employed as the verification process?

The router sends queries to the access control server, the access control server handles proxy requests to third party patching and antivirus servers.

121)

Which of the following would help Pete an admin, prevent access to a rogue access point connected to a switch.

Establish a MAC limit and age

122)

Which of the following open standards should Pete a security admin, select for remote authentication of users?

RADIUS

123)

Which of the following inspects traffic entering or leaving a network to look for anomalies against expected baselines?

IPS

124)

Which of the following would be the best reason for Jane a security admin, to initially select individual file encryption over the whole disk encryption?

It's faster to encrypt an individual file