Why is a penetration test considered to be more thorough than vulnerability scan?

• A.Vulnerability scans only do host discovery and port scanning by default.
• B.The tools used by penetration testers tend to have much more comprehensive vulnerability databases.
• C.It is not - a penetration test is often performed by an automated tool, while a vulnerability scan requires active engagement.
• D.A penetration test actively exploits vulnerabilities in the targeted infrastructure, while a vulnerability scan does not typically involve active exploitation.

Comment: *

Name: *

Email: *

Verification: *

A security policy will be more accepted by employees if it is consistent and has the support of

• A.coworkers.
• B.executive management.
• C.a supervisor.
• D.the security officer.

Comment: *

Name: *

Email: *

Verification: *

Advanced encryption standard is an algorithm used for which of the following?

• A.Data integrity
• B.Bulk data encryption
• C.Key discovery
• D.Key recovery

Comment: *

Name: *

Email: *

Verification: *

Port scanning can be used as part of a technical assessment to determine network vulnerabilities. The TCP XMAS scan is used to identify listening ports on the targeted system.
If a scanned port is open, what happens?

• A.The port will ignore the packets.
• B.The port will send an RST.
• C.The port will send an ACK.
• D.The port will send a SYN.

Comment: *

Name: *

Email: *

Verification: *

Which regulation defines security and privacy controls for Federal information systems and organizations?

• A.NIST-800-53
• B.PCI-DSS
• C.EU Safe Harbor
• D.HIPAA

Comment: *

Name: *

Email: *

Verification: *