Which of the following is designed to identify malicious attempts to penetrate systems?

• A.Intrusion Detection System
• B.Firewall
• C.Proxy
• D.Router

Comment: *

Name: *

Email: *

Verification: *

When creating a security program, which approach would be used if senior management is supporting and enforcing the security policy?

• A.A bottom-up approach
• B.An IT assurance approach
• C.A senior creation approach
• D.A top-down approach

Comment: *

Name: *

Email: *

Verification: *

In order to show improvement of security over time, what must be developed?

• A.Reports
• B.Testing tools
• C.Metrics
• D.Taxonomy of vulnerabilities

Comment: *

Name: *

Email: *

Verification: *

Your company was hired by a small healthcare provider to perform a technician assessment on the
network. What is the best approach for discovering vulnerabilities on a Windows-based computer?

• A.Check MITRE.org for the latest list of CVE findings
• B.Use a scan tool like Nessus
• C.Use the built-in Windows Update tool
• D.Create a disk image of a clean Windows installation

Comment: *

Name: *

Email: *

Verification: *

You are programming a buffer overflow exploit and you want to create a NOP sled of 200 bytes in the program exploit.c

What is the hexadecimal value of NOP instruction?

• A.0x70
• B.0x80
• C.0x90
• D.0x60

Comment: *

Name: *

Email: *

Verification: *