While performing online banking using a Web browser, Kyle receives an email that contains an image of a well-crafted art. Upon clicking the image, a new tab on the web browser opens and shows an animated GIF of bills and coins being swallowed by a crocodile. After several days, Kyle noticed that all his funds on the bank was gone. What Web browser-based security vulnerability got exploited by the hacker?

• A.Clickjacking
• B.Cross-Site Request Forgery
• C.Web Form Input Validation
• D.Cross-Site Scripting

Comment: *

Name: *

Email: *

Verification: *

What is the outcome of the comm"nc -l -p 2222 | nc 10.1.0.43 1234"?

• A.Netcat will listen on port 2222 and output anything received to a remote connection on 10.1.0.43 port
  1234.
• B.Netcat will listen for a connection from 10.1.0.43 on port 1234 and output anything received to port
  2222.
• C.Netcat will listen on port 2222 and then output anything received to local interface 10.1.0.43.
• D.Netcat will listen on the 10.1.0.43 interface for 1234 seconds on port 2222.

Comment: *

Name: *

Email: *

Verification: *

During a security audit of IT processes, an IS auditor found that there were no documented security procedures. What should the IS auditor do?

• A.Identify and evaluate existing practices
• B.Create a procedures document
• C.Conduct compliance testing
• D.Terminate the audit

Comment: *

Name: *

Email: *

Verification: *

Gavin owns a white-hat firm and is performing a website security audit for one of his clients. He begins by running a scan which looks for common misconfigurations and outdated software versions. Which of the following tools is he most likely using?

• A.Armitage
• B.Nikto
• C.Metasploit
• D.Nmap

Comment: *

Name: *

Email: *

Verification: *

Suppose your company has just passed a security risk assessment exercise. The results display that the risk of the breach in the main company application is 50%. Security staff has taken some measures and implemented the necessary controls. After that another security risk assessment was performed showing that risk has decreased to 10%. The risk threshold for the application is 20%.
Which of the following risk decisions will be the best for the project in terms of its successful continuation with most business profit?

• A.Introduce more controls to bring risk to 0%
• B.Mitigate the risk
• C.Avoid the risk
• D.Accept the risk

Comment: *

Name: *

Email: *

Verification: *