A penetration tester is crawling a target website that is available to the public. Which of the following represents the actions the penetration tester is performing?

• A.URL hijacking
• B.Reconnaissance
• C.Escalation of privilege
• D.White box testing

Comment: *

Name: *

Email: *

Verification: *

A security analyst is hardening a server with the directory services role installed. The analyst must ensure LDAP traffic cannot be monitored or sniffed and maintains compatibility with LDAP clients. Which of the following should the analyst implement to meet these requirements? (Select two.)

• A.Remote the LDAP directory service role from the server.
• B.Generate an X.509-compliant certificate that is signed by a trusted CA.
• C.Ensure port 636 is open between the clients and the servers using the communication.
• D.Install and configure an SSH tunnel on the LDAP server.
• E.Ensure port 389 is open between the clients and the servers using the communication.

Comment: *

Name: *

Email: *

Verification: *

Employees receive a benefits enrollment email from the company's human resources department at the beginning of each year. Several users have reported receiving the email but are unable to log in to the website with their usernames and passwords. Users who enter the URL for the human resources website can log in without issue. Which of the following security issues is occurring?

• A.Several users' computers were not configured to use HTTPS to access the website.
• B.The human resources servers received a large number of requests resulting in a DoS
• C.Users received a social engineering email and were directed to an external website.
• D.The internal DNS server was compromised, directing users to a hacker's server.

Comment: *

Name: *

Email: *

Verification: *

An IT manager is estimating the mobile device budget for the upcoming year. Over the last five years, the number of devices that were replaced due to loss, damage, or theft steadily increased by 10%. Which of the following would BEST describe the estimated number of devices to be replaced next year?

• A.ALE
• B.ARO
• C.SLE
• D.RPO

Comment: *

Name: *

Email: *

Verification: *

A company is terminating an employee for misbehavior. Which of the following steps is MOST important in the process of disengagement from this employee?

• A.Have the employee surrender company identification.
• B.Have the employee sign an NDA before departing
• C.Obtain a list of passwords used by the employee.
• D.Generate a report on outstanding projects the employee handled

Comment: *

Name: *

Email: *

Verification: *