A supervisor in your organization was demoted on Friday afternoon. The supervisor had the ability to modify the contents of a confidential database, as well as other managerial permissions. On Monday morning, the database administrator reported that log files indicated that several records were missing from the database. Which of the following risk mitigation strategies should have been implemented when the supervisor was demoted?

• A.Incident management
• B.IT governance
• C.Routine auditing
• D.Monthly user rights reviews

Comment: *

Name: *

Email: *

Verification: *

You have just received some room and WiFi access control recommendations from a security consulting company. Click on each building to bring up available security controls. Please implement the following requirements:
The Chief Executive Officer's (CEO) office had multiple redundant security measures installed on the door to the office. Remove unnecessary redundancies to deploy three-factor authentication, while retaining the expensive iris render.
The Public Cafe has wireless available to customers. You need to secure the WAP with WPA and place a passphrase on the customer receipts.
In the Data Center you need to include authentication from the "something you know" category and take advantage of the existing smartcard reader on the door.
In the Help Desk Office, you need to require single factor authentication through the use of physical tokens given to guests by the receptionist.
The PII Office has redundant security measures in place. You need to eliminate the redundancy while maintaining three-factor authentication and retaining the more expensive controls.

Instructions: The original security controls for each office can be reset at any time by selecting the Reset button. Once you have met the above requirements for each office, select the Save button. When you have completed the entire simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

Correct Answer:

See the solution below.
Explanation
Solution as

Comment: *

Name: *

Email: *

Verification: *

Joe a website administrator believes he owns the intellectual property for a company invention and has been replacing image files on the company's public facing website in the DMZ. Joe is using steganography to hide stolen data. Which of the following controls can be implemented to mitigate this type of inside threat?

• A.Digital signatures
• B.Stateful inspection firewall
• C.Change management
• D.Access controls
• E.File integrity monitoring

Comment: *

Name: *

Email: *

Verification: *

While reviewing the security controls in place for a web-based application, a security controls assessor notices that there are no password strength requirements in place. Because of this vulnerability, passwords might be easily discovered using a brute force attack.
Which of the following password requirements will MOST effectively improve the security posture of the application against these attacks? (Select two)

• A.Minimum complexity
• B.Maximum age limit
• C.Maximum length
• D.Minimum length
• E.Minimum age limit
• F.Minimum re-use limit

Comment: *

Name: *

Email: *

Verification: *

An administrator thinks the UNIX systems may be compromised, but a review of system log files provides no useful information. After discussing the situation with the security team, the administrator suspects that the attacker may be altering the log files and removing evidence of intrusion activity. Which of the following actions will help detect attacker attempts to further alter log files?

• A.Enable verbose system logging
• B.Implement remote syslog
• C.Set the bash_history log file to "read only"
• D.Change the permissions on the user's home directory

Comment: *

Name: *

Email: *

Verification: *