The Chief Information Security Officer (CISO) at a software development company is concerned about the lack of introspection during a testing cycle of the company's flagship product.
Testing was conducted by a small offshore consulting firm and the report by the consulting firm clearly indicates that limited test cases were used and many of the code paths remained untested.
The CISO raised concerns about the testing results at the monthly risk committee meeting, highlighting the need to get to the bottom of the product behaving unexpectedly in only some large enterprise deployments.
The Security Assurance and Development teams highlighted their availability to redo the testing if required.
Which of the following will provide the MOST thorough testing?

• A.Use the internal teams to perform Grey box testing.
• B.Use the internal teams to perform White box testing.
• C.Have the small consulting firm redo the Black box testing.
• D.Use a larger consulting firm to perform Black box testing.
• E.Use the internal team to perform Black box testing.

Comment: *

Name: *

Email: *

Verification: *

An internal penetration tester finds a legacy application that takes measurement input made in a text box and outputs a specific string of text related to industry requirements. There is no documentation about how this application works, and the source code has been lost. Which of the following would BEST allow the penetration tester to determine the input and output relationship?

• A.Performing a full packet capture
• B.Using the application in a malware sandbox
• C.Running an automated fuzzer
• D.Attempting SQL injection commands
• E.Constructing a known cipher text attack

Comment: *

Name: *

Email: *

Verification: *

A company provides on-demand cloud computing resources for a sensitive project. The company implements a fully virtualized datacenter and terminal server access with two-factor authentication for customer access to the administrative website. The security administrator at the company has uncovered a breach in data confidentiality. Sensitive data from customer A was found on a hidden directory within the VM of company
B. Company B is not in the same industry as company A and the two are not competitors. Which of the following has MOST likely occurred?

• A.Both VMs were left unsecured and an attacker was able to exploit network vulnerabilities to access each and move the data.
• B.A stolen two factor token was used to move data from one virtual guest to another host on the same network segment.
• C.A hypervisor server was left un-patched and an attacker was able to use a resource exhaustion attack to gain unauthorized access.
• D.An employee with administrative access to the virtual guests was able to dump the guest memory onto a mapped disk.

Comment: *

Name: *

Email: *

Verification: *

A security analyst receives an email from a peer that includes a sample of code from a piece of malware found in an application running in the organization's staging environment. During the incident response process, it is determined the code was introduced into the environment as a result of a compromised laptop being used to harvest credentials and access the organization's code repository. While the laptop itself was not used to access the code repository, an attacker was able to leverage the harvested credentials from another system in the development environment to bypass the ACLs limiting access to the repositories. Which of the following controls MOST likely would have interrupted the kill chain in this attack?

• A.IP whitelisting on the perimeter firewall
• B.Dynamic analysis scans in the production environment
• C.Time-based restrictions on developer access to code repositories
• D.Blue team engagement in peer-review activities
• E.MFA for developer access

Comment: *

Name: *

Email: *

Verification: *

An administrator has noticed mobile devices from an adjacent company on the corporate wireless network. Malicious activity is being reported from those devices. To add another layer of security in an enterprise environment, an administrator wants to add contextual authentication to allow users to access enterprise resources only while present in corporate buildings. Which of the following technologies would accomplish this?

• A.Rogue device detection
• B.GPS
• C.Bluetooth
• D.Port security

Comment: *

Name: *

Email: *

Verification: *