Which of the following controls is described in the statement given below?
"It ensures that the enforcement of organizational security policy does not rely on voluntary web application user compliance. It secures information by assigning sensitivity labels on information and comparing this to the level of security a user is operating at."

• A.Role-based Access Control
• B.Attribute-based Access Control
• C.Discretionary Access Control
• D.Mandatory Access Control

Comment: *

Name: *

Email: *

Verification: *

Adam works as a sales manager for Umbrella Inc. He wants to download software from the Internet. As the software comes from a site in his untrusted zone, Adam wants to ensure that the downloaded software has not been Trojaned. Which of the following options would indicate the best course of action for Adam?

• A.Compare the file's virus signature with the one published on the distribution.
• B.Compare the file's MD5 signature with the one published on the distribution media.
• C.Compare the version of the software with the one published on the distribution media.
• D.Compare the file size of the software with the one given on the Website.

Comment: *

Name: *

Email: *

Verification: *

Which of the following ensures that the investigation process of incident response team does not break any laws
during the response to an incident?

• A.Information Security representative
• B.Human Resource
• C.Legal representative
• D.Lead Investigator

Comment: *

Name: *

Email: *

Verification: *

Which of the following tools uses common UNIX/Linux tools like the strings and grep commands to search core system programs for signatures of the rootkits?

• A.OSSEC
• B.chkrootkit
• C.Blue Pill
• D.rkhunter

Comment: *

Name: *

Email: *

Verification: *

Which of the following tools is used for port scanning?

• A.NSLOOKUP
• B.L0phtcrack
• C.NETSH
• D.Nmap

Comment: *

Name: *

Email: *

Verification: *