A Network Administrator was recently promoted to Chief Security Officer at a local university. One of employee's new responsibilities is to manage the implementation of an RFID card access system to a new server room on campus. The server room will house student enrollment information that is securely backed up to an off-site location.
During a meeting with an outside consultant, the Chief Security Officer explains that he is concerned that the existing security controls have not been designed properly. Currently, the Network Administrator is responsible for approving and issuing RFID card access to the server room, as well as reviewing the electronic access logs on a weekly basis.
Which of the following is an issue with the situation?

• A.Undue influence
• B.Inadequate disaster recovery plan
• C.Lack of experience
• D.Segregation of duties

Comment: *

Name: *

Email: *

Verification: *

After gaining access to the password hashes used to protect access to a web based application, knowledge of which cryptographic algorithms would be useful to gain access to the application?

• A.SHA1
• B.AES
• C.Diffie-Helman
• D.RSA

Comment: *

Name: *

Email: *

Verification: *

Which United States legislation mandates that the Chief Executive Officer (CEO) and the Chief Financial Officer (CFO) must sign statements verifying the completeness and accuracy of financial reports?

• A.Federal Information Security Management Act (FISMA)
• B.Fair and Accurate Credit Transactions Act (FACTA)
• C.Gramm-Leach-Bliley Act (GLBA)
• D.Sarbanes-Oxley Act (SOX)

Comment: *

Name: *

Email: *

Verification: *

An LDAP directory can be used to store information similar to a SQL database. LDAP uses a ____
database structure instead of SQL's ______ structure. Because of this, LDAP has difficulty representing
many-to-one relationships.

• A.Hierarchical, Relational
• B.Simple, Complex
• C.Relational, Hierarchical
• D.Strict, Abstract

Comment: *

Name: *

Email: *

Verification: *

A large mobile telephony and data network operator has a data that houses network elements. These are essentially large computers running on Linux. The perimeter of the data center is secured with firewalls and IPS systems.
What is the best security policy concerning this setup?

• A.There is no need for specific security measures on the network elements as long as firewalls and IPS systems exist.
• B.As long as the physical access to the network elements is restricted, there is no need for additional measures.
• C.Network elements must be hardened with user ids and strong passwords. Regular security tests and audits should be performed.
• D.The operator knows that attacks and down time are inevitable and should have a backup site.

Comment: *

Name: *

Email: *

Verification: *