A bank stores and processes sensitive privacy information related to home loans. However, auditing has never been enabled on the system. What is the first step that the bank should take before enabling the audit feature?

• A.Determine the impact of enabling the audit feature.
• B.Allocate funds for staffing of audit log review.
• C.Perform a vulnerability scan of the system.
• D.Perform a cost/benefit analysis of the audit feature.

Comment: *

Name: *

Email: *

Verification: *

Matthew, a black hat, has managed to open a meterpreter session to one of the kiosk machines in Evil Corp's lobby. He checks his current SID, which is S-1-5-21-1223352397-1872883824-861252104-501. What needs to happen before Matthew has full administrator access?

• A.He already has admin privileges, as shown by the "501" at the end of the SID.
• B.He needs to gain physical access.
• C.He must perform privilege escalation.
• D.He needs to disable antivirus protection.

Comment: *

Name: *

Email: *

Verification: *

How can a policy help improve an employee's security awareness?

• A.By sharing security secrets with employees, enabling employees to share secrets, and establishing a consultative help line
• B.By decreasing an employee's vacation time, addressing ad-hoc employment clauses, and ensuring that managers know employee strengths
• C.By using informal networks of communication, establishing secret passing procedures, and immediately terminating employees
• D.By implementing written security procedures, enabling employee security training, and promoting the benefits of security

Comment: *

Name: *

Email: *

Verification: *

You are the Systems Administrator for a large corporate organization. You need to monitor all network traffic on your local network for suspicious activities and receive notifications when an attack is occurring. Which tool would allow you to accomplish this goal?

• A.Network-based IDS
• B.Firewall
• C.Proxy
• D.Host-based IDS

Comment: *

Name: *

Email: *

Verification: *

A computer technician is using a new version of a word processing software package when it is discovered that a special sequence of characters causes the entire computer to crash. The technician researches the bug and discovers that no one else experienced the problem. What is the appropriate next step?

• A.Find an underground bulletin board and attempt to sell the bug to the highest bidder.
• B.Ignore the problem completely and let someone else deal with it.
• C.Create a document that will crash the computer when opened and send it to friends.
• D.Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.

Comment: *

Name: *

Email: *

Verification: *