An administrator is trying to inspect SSL traffic to evaluate rf it has a malicious code injection The administrator is planning to use the inspection features of a firewall solution Which of the following should be done after the implementation of the firewall solution?

• A.Store all private keys in the DMZ escrow server
• B.Import the private certificate of each user to the firewall
• C.Generate the new firewall certificate and import it to all the user's endpoints
• D.Export the certificate chain to the WAF

Comment: *

Name: *

Email: *

Verification: *

An employee uses RDP to connect back to the office network. If RDP is misconfigured, which of the following security exposures would this lead to?

• A.Result in an attacker being able to phish the employee's username and password.
• B.A social engineering attack could occur, resulting in the employee's password being extracted.
• C.A man in the middle attack could occur, resulting the employee's username and password being captured.
• D.A virus on the administrator's desktop would be able to sniff the administrator's username and password.

Comment: *

Name: *

Email: *

Verification: *

Which of the following delineates why it is important to perform egress filtering and monitoring on Internet connected security zones of interfaces on a firewall?

• A.Egress traffic is more important than ingress traffic for malware prevention
• B.To rebalance the amount of outbound traffic and inbound traffic
• C.Outbound traffic could be communicating to known botnet sources
• D.To prevent DDoS attacks originating from external network

Comment: *

Name: *

Email: *

Verification: *

A security analyst is reviewing the password policy for a service account that is used for a critical network service. The password policy for this account is as follows:

Which of the following adjustments would be the MOST appropriate for the service account?

• A.Set the maximum password age to 15 days
• B.Disable account lockouts
• C.Set the minimum password age to seven days
• D.Increase password length to 18 characters

Comment: *

Name: *

Email: *

Verification: *

Which of the following can be mitigated with proper secure coding techniques?

• A.Error handling
• B.Cross-site scripting
• C.Input validation
• D.Header manipulation

Comment: *

Name: *

Email: *

Verification: *