Which regulation defines security and privacy controls for Federal information systems and organizations?

• A.HIPAA
• B.EU Safe Harbor
• C.PCI-DSS
• D.NIST-800-53

Comment: *

Name: *

Email: *

Verification: *

A company firewall engineer has configured a new DMZ to allow public systems to be located away from the internal network. The engineer has three security zones set:

The engineer wants to configure remote desktop access from a fixed IP on the remote network to a remote desktop server in the DMZ. Which rule would best fit this requirement?

• A.Permit 217.77.88.12 11.12.13.0/24 RDP 3389
• B.Permit 217.77.88.0/24 11.12.13.50 RDP 3389
• C.Permit 217.77.88.12 11.12.13.50 RDP 3389
• D.Permit 217.77.88.0/24 11.12.13.0/24 RDP 3389

Comment: *

Name: *

Email: *

Verification: *

A user on your Windows 2000 network has discovered that he can use L0phtcrack to sniff the SMB exchanges which carry user logons. The user is plugged into a hub with 23 other systems.
However, he is unable to capture any logons though he knows that other users are logging in.
What do you think is the most likely reason behind this?

• A.L0phtcrack only sniffs logons to web servers.
• B.Kerberos is preventing it.
• C.There is a NIDS present on that segment.
• D.Windows logons cannot be sniffed.

Comment: *

Name: *

Email: *

Verification: *

Which of the following types of firewalls ensures that the packets are part of the established session?

• A.Stateful inspection firewall
• B.Circuit-level firewall
• C.Application-level firewall
• D.Switch-level firewall

Comment: *

Name: *

Email: *

Verification: *

What is the name of the international standard that establishes a baseline level of confidence in the security functionality of IT products by providing a set of requirements for evaluation?

• A.ISO 26029
• B.The Wassenaar Agreement
• C.Common Criteria
• D.Blue Book

Comment: *

Name: *

Email: *

Verification: *