The "white box testing" methodology enforces what kind of restriction?

• A.Only the internal operation of a system is known to the tester.
• B.The internal operation of a system is only partly accessible to the tester.
• C.Only the external operation of a system is accessible to the tester.
• D.The internal operation of a system is completely known to the tester.

Comment: *

Name: *

Email: *

Verification: *

Gavin owns a white-hat firm and is performing a website security audit for one of his clients. He begins by
running a scan which looks for common misconfigurations and outdated software versions. Which of the
following tools is he most likely using?

• A.Metasploit
• B.Nikto
• C.Nmap
• D.Armitage

Comment: *

Name: *

Email: *

Verification: *

How do employers protect assets with security policies pertaining to employee surveillance activities?

• A.Employers use informal verbal communication channels to explain employee monitoring activities to employees.
• B.Employers provide employees written statements that clearly discuss the boundaries of monitoring activities and consequences.
• C.Employers promote monitoring activities of employees as long as the employees demonstrate trustworthiness.
• D.Employers use network surveillance to monitor employee email traffic, network access, and to record employee keystrokes.

Comment: *

Name: *

Email: *

Verification: *

A regional bank hires your company to perform a security assessment on their network after a recent data breach. The attacker was able to steal financial data from the bank by compromising only a single server.
Based on this information, what should be one of your key recommendations to the bank?

• A.Place a front-end web server in a demilitarized zone that only handles external web traffic
• B.Require all employees to change their passwords immediately
• C.Move the financial data to another server on the same IP subnet
• D.Issue new certificates to the web servers from the root certificate authority

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements is TRUE?

• A.Sniffers operate on both Layer 2 & Layer 3 of the OSI model.
• B.Sniffers operate on Layer 3 of the OSI model
• C.Sniffers operate on Layer 2 of the OSI model
• D.Sniffers operate on the Layer 1 of the OSI model.

Comment: *

Name: *

Email: *

Verification: *