An administrator needs to protect against downgrade attacks due to various vulnerabilities in SSL/TLS. Which of the following actions should be performed? (Select TWO)

• A.Disable flash cookie support
• B.Configure cipher order
• C.Request a new certificate from the CA
• D.Re-key the SSL certificate
• E.Add the old certificate to the CRL
• F.Set minimum protocol supported

Comment: *

Name: *

Email: *

Verification: *

A security administrator is diagnosing a server where the CPU utilization is at 100% for 24 hours.
The main culprit of CPU utilization is the antivirus program. Which of the following issue could occur if left unresolved? (Select TWO)

• A.MITM attack
• B.DLL injection
• C.Buffer overflow
• D.Resource exhaustion
• E.DoS attack

Comment: *

Name: *

Email: *

Verification: *

A new security administrator ran a vulnerability scanner for the first time and caused a system outage.
Which of the following types of scans MOST likely caused the outage?

• A.Intrusive non-credentialed scan
• B.Non-intrusive credentialed scan
• C.Intrusive credentialed scan
• D.Non-intrusive non-credentialed scan

Comment: *

Name: *

Email: *

Verification: *

A security analyst has received the following alert snippet from the HIDS appliance:
PROTOCOL SIG SRC.PORT DST.PORT
TCP XMAS SCAN 192.168.1.1:1091 192.168.1.2:8891
TCP XMAS SCAN 192.168.1.1:649 192.168.1.2:9001
TCP XMAS SCAN 192.168.1.1:2264 192.168.1.2:6455
TCP XMAS SCAN 192.168.1.1:3464 192.168.1.2:8744
Given the above logs, which of the following is the cause of the attack?

• A.There is improper Layer 2 segmentation.
• B.FIN, URG, and PSH flags are set in the packet header.
• C.TCP MSS is configured improperly.
• D.The TCP ports on destination are all open.

Comment: *

Name: *

Email: *

Verification: *

A network technician discovered the usernames and passwords used for network device configuration have been compromised by a user with a packet sniffer. Which of the following would secure the credentials from sniffing?

• A.Implement complex passwords.
• B.Configure SNMPv2 for device management.
• C.Use TFTP to copy device configuration.
• D.Use SSH for remote access.

Comment: *

Name: *

Email: *

Verification: *