MX record priority increases as the number increases. (True/False.)

• A.False
• B.True

Comment: *

Name: *

Email: *

Verification: *

Jesse receives an email with an attachment labeled "Court_Notice_21206.zip". Inside the zip file is a file named "Court_Notice_21206.docx.exe" disguised as a word document.
Upon execution, a window appears stating, "This word document is corrupt." In the background, the file copies itself to Jesse APPDATA\local directory and begins to beacon to a C2 server to download additional malicious binaries.
What type of malware has Jesse encountered?

• A.Trojan
• B.Worm
• C.Macro Virus
• D.Key-Logger

Comment: *

Name: *

Email: *

Verification: *

A consultant has been hired by the V.P. of a large financial organization to assess the company's security posture. During the security testing, the consultant comes across child pornography on the V.P.'s computer. What is the consultant's obligation to the financial organization?

• A.Bring the discovery to the financial organization's human resource department.
• B.Stop work immediately and contact the authorities.
• C.Say nothing and continue with the security testing.
• D.Delete the pornography, say nothing, and continue security testing.

Comment: *

Name: *

Email: *

Verification: *

What term describes the amount of risk that remains after the vulnerabilities are classified and the countermeasures have been deployed?

• A.Residual risk
• B.Inherent risk
• C.Deferred risk
• D.Impact risk

Comment: *

Name: *

Email: *

Verification: *

A penetration test was done at a company. After the test, a report was written and given to the company's IT authorities. A section from the report is shown below:
* Access List should be written between VLANs.
* Port security should be enabled for the intranet.
* A security solution which filters data packets should be set between intranet (LAN) and DMZ.
* A WAF should be used in front of the web applications.
According to the section from the report, which of the following choice is true?

• A.There is access control policy between VLANs.
• B.MAC Spoof attacks cannot be performed.
• C.Possibility of SQL Injection attack is eliminated.
• D.A stateful firewall can be used between intranet (LAN) and DMZ.

Comment: *

Name: *

Email: *

Verification: *