A wireless network has the following design requirements:
*Authentication must not be dependent on enterprise directory service.
*It must allow backgroud reconenction for mobile users.
*It must not depend on user certificates.
Which of the following should be used in the design to meet the requirements? (Select Two)

• A.PEAP
• B.PSK
• C.Open System authentication
• D.EAP TLS
• E.Captive Portals

Comment: *

Name: *

Email: *

Verification: *

A security analyst has received the following alert snippet from the HIDS appliance:

Given the above logs, which of the following is the cause of the attack?

• A.FIN, URG, and PSH flags are set in the packet header
• B.There is improper Layer 2 segmentation
• C.The TCP ports on destination are all open
• D.TCP MSS is configured improperly

Comment: *

Name: *

Email: *

Verification: *

Technicians working with servers hosted at the company's datacenter are increasingly complaining of electric shocks when touching metal items which have been linked to hard drive failures.
Which of the following should be implemented to correct this issue?

• A.Decrease the room temperature
• B.Increase humidity in the room
• C.Utilize better hot/cold aisle configurations
• D.Implement EMI shielding

Comment: *

Name: *

Email: *

Verification: *

An employee on the Internet-facing part of a company's website submits a 20-character phrase in a small textbox on a web form. The website returns a message back to the browser stating Error: Table 'advprofile' entry into column 'lname' has exceeded number of allowed characters. Error saving database information.
Of which of the following is this an example?

• A.Resource exhaustion
• B.Buffer overflow
• C.Improperly configured account
• D.Improper error handling

Comment: *

Name: *

Email: *

Verification: *

A forensic analyst is asked to respond to an ongoing network attack on a server. Place the items in the list below in the correct order in which the forensic analyst should preserve them.

Correct Answer:

Explanation:
When dealing with multiple issues, address them in order of volatility (OOV); always deal with the most volatile first. Volatility can be thought of as the amount of time that you have to collect certain data before a window of opportunity is gone. Naturally, in an investigation you want to collect everything, but some data will exist longer than others, and you cannot possibly collect all of it once. As an example, the OOV in an investigation may be RAM, hard drive data, CDs/DVDs, and printouts.
Order of volatility: Capture system images as a snapshot of what exists, look at network traffic and logs, capture any relevant video/screenshots/hashes, record time offset on the systems, talk to witnesses, and track total man-hours and expenses associated with the investigation.

Comment: *

Name: *

Email: *

Verification: *