A security engineer is responsible for monitoring company applications for known vulnerabilities.
Which of the following is a way to stay current on exploits and information security news?

• A.Update company policies and procedures
• B.Subscribe to security mailing lists
• C.Implement security awareness training
• D.Ensure that the organization vulnerability management plan is up-to-date

Comment: *

Name: *

Email: *

Verification: *

An assessor identifies automated methods for identifying security control compliance through validating sensors at the endpoint and at Tier 2. Which of the following practices satisfy continuous monitoring of authorized information systems?

• A.Independent verification and validation
• B.Security test and evaluation
• C.Risk assessment
• D.Ongoing authorization

Comment: *

Name: *

Email: *

Verification: *

The technology steering committee is struggling with increased requirements stemming from an increase in telecommuting. The organization has not addressed telecommuting in the past. The implementation of a new SSL-VPN and a VOIP phone solution enables personnel to work from remote locations with corporate assets. Which of the following steps must the committee take FIRST to outline senior management's directives?

• A.Develop an information classification scheme that will properly secure data on corporate systems.
• B.Implement database views and constrained interfaces so remote users will be unable to access PII from personal equipment.
• C.Publish a policy that addresses the security requirements for working remotely with company equipment.
• D.Work with mid-level managers to identify and document the proper procedures for telecommuting.

Comment: *

Name: *

Email: *

Verification: *

An organization uses IP address block 203.0.113.0/24 on its internal network. At the border router, the network administrator sets up rules to deny packets with a source address in this subnet from entering the network, and to deny packets with a destination address in this subnet from leaving the network. Which of the following is the administrator attempting to prevent?

• A.BGP route hijacking attacks
• B.Bogon IP network traffic
• C.IP spoofing attacks
• D.Man-in-the-middle attacks
• E.Amplified DDoS attacks

Comment: *

Name: *

Email: *

Verification: *

Drag and drop the cloud deployment model to the associated use-case scenario. Options may be used only once or not at all.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *