Employees are reporting that they have been receiving a large number of emails advertising products and services. Links in the email direct the users' browsers to the websites for the items being offered. No reports of increased virus activity have been observed. A security administrator suspects that the users are the targets of:

• A.A spoofing attack
• B.A watering hole attack
• C.A spam campaign
• D.Spear phishing

Comment: *

Name: *

Email: *

Verification: *

During an assessment a security analyst was asked to use a service account to perform a vulnerability scan against the main application server. Which of the following BEST classifies this type of test?

• A.Credentialed test
• B.Non-intrusive test
• C.Escalation of privilege test
• D.Initial exploitation test

Comment: *

Name: *

Email: *

Verification: *

A coding error has been discovered on a customer-facing website. The error causes each request to return confidential PHI data for the incorrect organization. The IT department is unable to identify the specific customers who are affected. As a result, all customers must be notified of the potential breach. Which of the following would allow the team to determine the scope of future incidents?

• A.Intrusion detection system
• B.Database access monitoring
• C.Application fuzzing
• D.Monthly vulnerability scans

Comment: *

Name: *

Email: *

Verification: *

An attacker compromises a public CA and issues unauthorized X.509 certificates for
Company.com. In the future, impact of similar incidents. Which of the following would assist
Company.com with its goal?

• A.Certificate stapling
• B.Certificate chaining
• C.Certificate with extended validation
• D.Certificate pinning

Comment: *

Name: *

Email: *

Verification: *

You have just received some room and WiFi access control recommendations from a security consulting company. Click on each building to bring up available security controls. Please implement the following requirements:
The Chief Executive Officer's (CEO) office had multiple redundant security measures installed on the door to the office. Remove unnecessary redundancies to deploy three-factor authentication, while retaining the expensive iris render.
The Public Cafe has wireless available to customers. You need to secure the WAP with WPA and place a passphrase on the customer receipts.
In the Data Center you need to include authentication from the "something you know" category and take advantage of the existing smartcard reader on the door.
In the Help Desk Office, you need to require single factor authentication through the use of physical tokens given to guests by the receptionist.
The PII Office has redundant security measures in place. You need to eliminate the redundancy while maintaining three-factor authentication and retaining the more expensive controls.

Instructions: The original security controls for each office can be reset at any time by selecting the Reset button. Once you have met the above requirements for each office, select the Save button. When you have completed the entire simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

Correct Answer:

See the solution below.
Explanation
Solution as

Comment: *

Name: *

Email: *

Verification: *