Which of the following tools performs comprehensive tests against web servers, including dangerous files and CGIs?

• A.Nikto
• B.Snort
• C.John the Ripper
• D.Dsniff

Comment: *

Name: *

Email: *

Verification: *

Which of these options is the most secure procedure for storing backup tapes?

• A.In a climate controlled facility offsite
• B.On a different floor in the same building
• C.Inside the data center for faster retrieval in a fireproof safe
• D.In a cool dry environment

Comment: *

Name: *

Email: *

Verification: *

The Heartbleed bug was discovered in 2014 and is widely referred to under MITRE's Common Vulnerabilities and Exposures (CVE) as CVE-2014-0160. This bug affects the OpenSSL implementation of the transport layer security (TLS) protocols defined in RFC6520.
What type of key does this bug leave exposed to the Internet making exploitation of any compromised system very easy?

• A.Private
• B.Public
• C.Shared
• D.Root

Comment: *

Name: *

Email: *

Verification: *

An incident investigator asks to receive a copy of the event logs from all firewalls, proxy servers, and Intrusion Detection Systems (IDS) on the network of an organization that has experienced a possible breach of security.
When the investigator attempts to correlate the information in all of the logs, the sequence of many of the logged events do not match up.
What is the most likely cause?

• A.The network devices are not all synchronized.
• B.Proper chain of custody was not observed while collecting the logs.
• C.The attacker altered or erased events from the logs.
• D.The security breach was a false positive.

Comment: *

Name: *

Email: *

Verification: *

Which of the following options represents a conceptual characteristic of an anomaly-based IDS over a signature-based IDS?

• A.Can identify unknown attacks
• B.Produces less false positives
• C.Cannot deal with encrypted network traffic
• D.Requires vendor updates for a new threat

Comment: *

Name: *

Email: *

Verification: *