The practical realities facing organizations today make risk response strategies essential. Which of the following is NOT one of the five basic responses to risk?

• A.Accept
• B.Delegate
• C.Mitigate
• D.Avoid

Comment: *

Name: *

Email: *

Verification: *

The Payment Card Industry Data Security Standard (PCI DSS) contains six different categories of control objectives. Each objective contains one or more requirements, which must be followed in order to achieve compliance. Which of the following requirements would best fit under the objective, "Implement strong access control measures"?

• A.Use and regularly update anti-virus software on all systems commonly affected by malware.
• B.Assign a unique ID to each person with computer access.
• C.Regularly test security systems and processes.
• D.Encrypt transmission of cardholder data across open, public networks.

Comment: *

Name: *

Email: *

Verification: *

Which type of sniffing technique is generally referred as MiTM attack?

• A.Password Sniffing
• B.DHCP Sniffing
• C.ARP Poisoning
• D.Mac Flooding

Comment: *

Name: *

Email: *

Verification: *

A penetration tester is conducting a port scan on a specific host. The tester found several ports opened that were confusing in concluding the Operating System (OS) version installed. Considering that NMAP result below, which of the following is likely to be installed on the target machine by the OS? Starting NMAP 5.21 at
2011-03-15 11:06 NMAP scan report for 172.16.40.65 Host is up (1.00s latency). Not shown: 993 closed ports PORT STATE SERVICE 21/tcp open ftp 23/tcp open telnet 80/tcp open http 139/tcp open netbios-ssn 515/tcp open 631/tcp open ipp 9100/tcp open MAC Address: 00:00:48:0D:EE:8

• A.The host is likely a router.
• B.The host is likely a Linux machine.
• C.The host is likely a Windows machine.
• D.The host is likely a printer.

Comment: *

Name: *

Email: *

Verification: *

You went to great lengths to install all the necessary technologies to prevent hacking attacks, such as expensive firewalls, antivirus software, anti-spam systems and intrusion detection/prevention tools in your company's network. You have configured the most secure policies and tightened every device on your network. You are confident that hackers will never be able to gain access to your network with complex security system in place.
Your peer, Peter Smith who works at the same department disagrees with you.
He says even the best network security technologies cannot prevent hackers gaining access to the network because of presence of "weakest link" in the security chain.
What is Peter Smith talking about?

• A."Polymorphic viruses" are the weakest link in the security chain since the Anti-Virus scanners will not be able to detect these attacks
• B.Untrained staff or ignorant computer users who inadvertently become the weakest link in your security chain
• C."zero-day" exploits are the weakest link in the security chain since the IDS will not be able to detect these attacks
• D.Continuous Spam e-mails cannot be blocked by your security system since spammers use different techniques to bypass the filters in your gateway

Comment: *

Name: *

Email: *

Verification: *