Which of the following US Acts emphasized a "risk-based policy for cost-effective security" and makes mandatory for agency program officials, chief information officers, and inspectors general (IGs) to conduct annual reviews of the agency's information security program and report the results to Office of Management and Budget?

• A.The Electronic Communications Privacy Act of 1986 (ECPA)
• B.The Fair Credit Reporting Act (FCRA)
• C.The Equal Credit Opportunity Act (ECOA)
• D.Federal Information Security Management Act of 2002 (FISMA)

Comment: *

Name: *

Email: *

Verification: *

Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer overflow occurs
when a particular operation/function writes more data into a variable than the variable was designed to hold.
Which of the following are the two popular types of buffer overflows?
Each correct answer represents a complete solution. Choose two.

• A.Stack based buffer overflow
• B.Heap based buffer overflow
• C.Static buffer overflows
• D.Dynamic buffer overflows

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the most common vulnerability that can affect desktop applications written in native code?

• A.SpyWare
• B.Malware
• C.Buffer overflow
• D.DDoS attack

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements are true regarding SYN flood attack?

• A.The attacker sends thousands and thousands of ACK packets to the victim.
• B.SYN cookies provide protection against the SYN flood by eliminating the resources allocated on the target host.
• C.SYN flood is a form of Denial-of-Service (DoS) attack.
• D.The attacker sends a succession of SYN requests to a target system.

Comment: *

Name: *

Email: *

Verification: *

Adam has installed and configured his wireless network. He has enabled numerous security features such as changing
the default SSID, enabling WPA encryption, and enabling MAC filtering on his wireless router. Adam notices that when
he uses his wireless connection, the speed is sometimes 16 Mbps and sometimes it is only 8 Mbps or less. Adam
connects to the management utility wireless router and finds out that a machine with an unfamiliar name is
connected through his wireless connection. Paul checks the router's logs and notices that the unfamiliar machine has
the same MAC address as his laptop.
Which of the following attacks has been occurred on the wireless network of Adam?

• A.DNS cache poisoning
• B.NAT spoofing
• C.MAC spoofing
• D.ARP spoofing

Comment: *

Name: *

Email: *

Verification: *