Which of the following BEST describes a security exploit for which a vendor patch is not readily available?

• A.Race condition
• B.End of life
• C.Integer overflow
• D.Zero-day

Comment: *

Name: *

Email: *

Verification: *

You have just received some room and WiFi access control recommendations from a security consulting company. Click on each building to bring up available security controls. Please implement the following requirements:
The Chief Executive Officer's (CEO) office had multiple redundant security measures installed on the door to the office. Remove unnecessary redundancies to deploy three-factor authentication, while retaining the expensive iris render.
The Public Cafe has wireless available to customers. You need to secure the WAP with WPA and place a passphrase on the customer receipts.
In the Data Center you need to include authentication from the "something you know" category and take advantage of the existing smartcard reader on the door.
In the Help Desk Office, you need to require single factor authentication through the use of physical tokens given to guests by the receptionist.
The PII Office has redundant security measures in place. You need to eliminate the redundancy while maintaining three-factor authentication and retaining the more expensive controls.

Instructions: The original security controls for each office can be reset at any time by selecting the Reset button. Once you have met the above requirements for each office, select the Save button. When you have completed the entire simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

Correct Answer:

See the solution below.
Explanation
Solution as

Comment: *

Name: *

Email: *

Verification: *

A systems administrator is increasing the security settings on a virtual host to ensure users on one VM cannot access information from another VM. Which of the following is the administrator protecting against?

• A.VM sandboxing
• B.VM sprawl
• C.VM migration
• D.VM escape

Comment: *

Name: *

Email: *

Verification: *

A datacenter recently experienced a breach. When access was gained, an RF device was used to access an air-gapped and locked server rack. Which of the following would BEST prevent this type of attack?

• A.Faraday cage
• B.Smart cards
• C.Infrared detection
• D.Alarms

Comment: *

Name: *

Email: *

Verification: *

A security program manager wants to actively test the security posture of a system. The system is not yet
in production and has no uptime requirement or active user base.
Which of the following methods will produce a report which shows vulnerabilities that were actually
exploited?

• A.Peer review
• B.Component testing
• C.Penetration testing
• D.Vulnerability testing

Comment: *

Name: *

Email: *

Verification: *