A project manager is working with a software development group to collect and evaluate user stories related to the organization's internally designed CRM tool. After defining requirements, the project manager would like to validate the developer's interpretation and understanding of the user's request. Which of the following would BEST support this objective?

• A.Design review
• B.Peer review
• C.Scrum
• D.User acceptance testing
• E.Unit testing

Comment: *

Name: *

Email: *

Verification: *

A red team is able to connect a laptop with penetration testing tools directly into an open network port The team then is able to take advantage of a vulnerability on the domain controller to create and promote a new enterprise administrator. Which of the following technologies would MOST likely eliminate this attack vector m the future?

• A.Install a NIPS with rules appropriate to drop most exploit traffic
• B.Implement 802.1X with certificate-based authentication
• C.Ensure the domain controller has the latest security patches
• D.Monitor for anomalous creations of privileged domain accounts

Comment: *

Name: *

Email: *

Verification: *

During an incident involving the company main database, a team of forensics experts is hired to respond to the breach. The team is in charge of collecting forensics evidence from the company's database server. Which of the following is the correct order in which the forensics team should engage?

• A.Notify senior management, secure the scene, capture volatile storage, capture non-volatile storage, implement chain of custody, and analyze original media.
• B.Take inventory, secure the scene, capture RAM, capture hard drive, implement chain of custody, document, and analyze the data.
• C.Implement chain of custody, take inventory, secure the scene, capture volatile and non-volatile storage, and document the findings.
• D.Secure the scene, take inventory, capture volatile storage, capture non-volatile storage, document, and implement chain of custody.

Comment: *

Name: *

Email: *

Verification: *

Following the most recent patch deployment, a security engineer receives reports that the ERP application is no longer accessible. The security engineer reviews the situation and determines a critical security patch that was applied to the ERP server is the cause. The patch is subsequently backed out Which of the following security controls would be BEST to implement to mitigate the threat caused by the missing patch?

• A.Anti-malware
• B.Patch testing
• C.Vulnerability scanner
• D.HIPS

Comment: *

Name: *

Email: *

Verification: *

A new employee is plugged into the network on a BYOD machine but cannot access the network Which of the following must be configured so the employee can connect to the network?

• A.Port security
• B.Remote access
• C.Firewall
• D.VPN

Comment: *

Name: *

Email: *

Verification: *