Vlady works in a fishing company where the majority of the employees have very little understanding of IT let alone IT Security. Several information security issues that Vlady often found includes, employees sharing password, writing his/her password on a post it note and stick it to his/her desk, leaving the computer unlocked, didn't log out from emails or other social media accounts, and etc.
After discussing with his boss, Vlady decided to make some changes to improve the security environment in his company. The first thing that Vlady wanted to do is to make the employees understand the importance of keeping confidential information, such as password, a secret and they should not share it with other persons.
Which of the following steps should be the first thing that Vlady should do to make the employees in his company understand to importance of keeping confidential information a secret?

• A.Information security awareness training
• B.Warning to those who write password on a post it note and put it on his/her desk
• C.Developing a strict information security policy
• D.Conducting a one to one discussion with the other employees about the importance of information security

Comment: *

Name: *

Email: *

Verification: *

Which NMAP feature can a tester implement or adjust while scanning for open ports to avoid detection by the network's IDS?

• A.Fingerprinting to identify which operating systems are running on the network
• B.Traceroute to control the path of the packets sent during the scan
• C.Timing options to slow the speed that the port scan is conducted
• D.ICMP ping sweep to determine which hosts on the network are not available

Comment: *

Name: *

Email: *

Verification: *

Which type of security document is written with specific step-by-step details?

• A.Procedure
• B.Policy
• C.Process
• D.Paradigm

Comment: *

Name: *

Email: *

Verification: *

You are a Network Security Officer. You have two machines. The first machine (192.168.0.99) has snort installed, and the second machine (192.168.0.150) has kiwi syslog installed. You perform a syn scan in your network, and you notice that kiwi syslog is not receiving the alert message from snort. You decide to run wireshark in the snort machine to check if the messages are going to the kiwi syslog machine.
What wireshark filter will show the connections from the snort machine to kiwi syslog machine?

• A.tcp.dstport==514 && ip.dst==192.168.0.150
• B.tcp.srcport==514 && ip.src==192.168.0.99
• C.tcp.dstport==514 && ip.dst==192.168.0.0/16
• D.tcp.srcport==514 && ip.src==192.168.150

Comment: *

Name: *

Email: *

Verification: *

Which of the following tools is used to analyze the files produced by several packet-capture programs such as tcpdump, WinDump, Wireshark, and EtherPeek?

• A.tcptrace
• B.tcptraceroute
• C.Nessus
• D.OpenVAS

Comment: *

Name: *

Email: *

Verification: *