A pentester must attempt to crack passwords on a windows domain that enforces strong complex passwords.
Which of the following would crack the MOST passwords in the shortest time period?

• A.Online password testing
• B.Rainbow tables attack
• C.Dictionary attack
• D.Brute force attack

Comment: *

Name: *

Email: *

Verification: *

An analyst is investigating behavior on a corporate-owned, corporate-managed mobile device with application whitelisting enabled, based on a name string. The employee to whom the device is assigned reports the approved email client is displaying warning messages that can launch browser windows and is adding unrecognized email addresses to the "compose" window.
Which of the following would provide the analyst the BEST chance of understanding and characterizing the malicious behavior?

• A.Reverse engineer the application binary.
• B.Perform static code analysis on the source code.
• C.Penetration test the mobile application.
• D.Analyze the device firmware via the JTAG interface.
• E.Change to a whitelist that uses cryptographic hashing.

Comment: *

Name: *

Email: *

Verification: *

A recent overview of the network's security and storage applications reveals a large amount of data that needs to be isolated for security reasons. Below are the critical applications and devices configured on the network:
Firewall

Core switches

RM server

Virtual environment

NAC solution

The security manager also wants data from all critical applications to be aggregated to correlate events from multiple sources. Which of the following must be configured in certain applications to help ensure data aggregation and data isolation are implemented on the critical applications and devices? (Select TWO).

• A.Dataremanants
• B.Portaggregation
• C.NICteaming
• D.Routingtables
• E.Logforwarding
• F.Zones

Comment: *

Name: *

Email: *

Verification: *

Given the following code snippet:

Of which of the following is this snippet an example?

• A.Data execution prevention
• B.Improper filed usage
• C.Failure to use standard libraries
• D.Buffer overflow
• E.Input validation

Comment: *

Name: *

Email: *

Verification: *

A recent penetration test identified that a web server has a major vulnerability. The web server hosts a critical shipping application for the company and requires 99.99% availability. Attempts to fix the vulnerability would likely break the application. The shipping application is due to be replaced in the next three months. Which of the following would BEST secure the web server until the replacement web server is ready?

• A.Application firewall
• B.HIDS
• C.Spam filters
• D.Antivirus
• E.Patch management

Comment: *

Name: *

Email: *

Verification: *