A company wants to ensure confidential data from storage media is sanitized in such a way that the drive
cannot be reused. Which of the following method should the technician use?

• A.Overwriting
• B.Shredding
• C.Low-level formatting
• D.Wiping
• E.Repartitioning

Comment: *

Name: *

Email: *

Verification: *

A Chief Executive Officer (CEO) suspects someone in the lab testing environment is stealing confidential information after working hours when no one else is around. Which of the following actions can help to prevent this specific threat?

• A.Implement time-of-day restrictions.
• B.Require swipe-card access to enter the lab.
• C.Secretly install a hidden surveillance camera.
• D.Audit file access times.

Comment: *

Name: *

Email: *

Verification: *

A security analyst is testing both Windows and Linux systems for unauthorized DNS zone transfers within a LAN on comptia.org from example.org. Which of the following commands should the security analyst use? (Select two.)

• A.ifconfig eth0 down
  ifconfig eth0 up
  dhclient renew
• B.[email protected] comptia.org
• C.nslookup
  comptia.org
  set type=ANY
  ls-d example.org
• D.dig -axfr [email protected]
• E.nslookup
  comptia.org
  set type=MX
  example.org
• F.ipconfig/flushDNS

Comment: *

Name: *

Email: *

Verification: *

An organization uses SSO authentication for employee access to network resources. When an employee resigns, as per the organization's security policy, the employee's access to all network resources is terminated immediately. Two weeks later, the former employee sends an email to the help desk for a password reset to access payroll information from the human resources server. Which of the following represents the BEST course of action?

• A.Deny the former employee's request, since the password reset request came from an external email address.
• B.Approve the former employee's request, as there would not be a security issue with the former employee gaining access to network.
• C.Approve the former employee's request, as a password reset would give the former employee access to only the human resources server.
• D.Deny the former employee's request, as a password reset would give the employee access to all network resources.

Comment: *

Name: *

Email: *

Verification: *

A security analyst wants to harden the company's VoIP PBX. The analyst is worried that credentials may be intercepted and compromised when IP phones authenticate with the BPX. Which of the following would best prevent this from occurring?

• A.Place the phones and PBX in their own VLAN.
• B.Restrict the phone connections to the PBX.
• C.Implement SRTP between the phones and the PBX.
• D.Require SIPS on connections to the PBX.

Comment: *

Name: *

Email: *

Verification: *