A company is not familiar with the risks associated with IPv6. The systems administrator wants to isolate IPv4 from IPv6 traffic between two different network segments. Which of the following should the company implement? (Choose two.)

• A.Use an internal firewall to block UDP port 3544.
• B.Disable network discovery protocol on all company routers.
• C.Block IP protocol 41 using Layer 3 switches.
• D.Disable the DHCPv6 service from all routers.
• E.Drop traffic for ::/0 at the edge firewall.
• F.Implement a 6in4 proxy server.

Comment: *

Name: *

Email: *

Verification: *

An engineer is evaluating the control profile to assign to a system containing PII, financial, and proprietary data.

Based on the data classification table above, which of the following BEST describes the overall classification?

• A.High confidentiality, medium availability
• B.Low availability, low confidentiality
• C.High integrity, low availability
• D.High confidentiality, high availability

Comment: *

Name: *

Email: *

Verification: *

A security incident responder discovers an attacker has gained access to a network and has overwritten
key system files with backdoor software. The server was reimaged and patched offline. Which of the
following tools should be implemented to detect similar attacks?

• A.Vulnerability scanner
• B.NIPS
• C.File integrity monitor
• D.TPM
• E.Host-based firewall

Comment: *

Name: *

Email: *

Verification: *

A scrum master is working with a development team to develop new functionality of a mobile communication platform. As part of the SDLC. changes must be peer reviewed prior to inclusion in a build. To use the group's time as efficiently as possible. prior to which of the following phases must the scrum master ensure time for this activity is allocated'?

• A.Integration testing
• B.Load testing
• C.User acceptance testing
• D.Regression testing
• E.Unit testing

Comment: *

Name: *

Email: *

Verification: *

A Chief Information Officer (CIO) publicly announces the implementation of a new financial system. As part of a security assessment that includes a social engineering task, which of the following tasks should be conducted to demonstrate the BEST means to gain information to use for a report on social vulnerability details about the financial system?

• A.Compromise the email server to obtain a list of attendees who responded to the invitation who is on the IT staff
• B.Understand the CIO is a social drinker, and find the means to befriend the CIO at establishments the CIO frequents
• C.Notify the CIO that, through observation at events, malicious actors can identify individuals to befriend
• D.Call the CIO and ask for an interview, posing as a job seeker interested in an open position

Comment: *

Name: *

Email: *

Verification: *