Which of the following statements about threats are true?
Each correct answer represents a complete solution. Choose all that apply.

• A.A threat is a weakness or lack of safeguard that can be exploited by vulnerability, thus causing harm to the information systems or networks.
• B.A threat is a potential for violation of security which exists when there is a circumstance, capability, action, or event that could breach security and cause harm.
• C.A threat is any circumstance or event with the potential of causing harm to a system in the form of destruction, disclosure, modification of data, or denial of service.
• D.A threat is a sequence of circumstances and events that allows a human or other agent to cause an information-related misfortune by exploiting vulnerability in an IT product.

Comment: *

Name: *

Email: *

Verification: *

Which of the following types of attacks is often performed by looking surreptitiously at the keyboard or monitor of an
employee's computer?

• A.Man-in-the-middle attack
• B.Buffer-overflow attack
• C.Denial-of-Service (DoS) attack
• D.Shoulder surfing attack

Comment: *

Name: *

Email: *

Verification: *

You have inserted a Trojan on your friend's computer and you want to put it in the startup so that whenever the computer reboots the Trojan will start to run on the startup. Which of the following registry entries will you edit to accomplish the task?

• A.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Start
• B.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Auto
• C.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
• D.HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Startup

Comment: *

Name: *

Email: *

Verification: *

Adam works as a Security Administrator for the Umbrella Inc. A project has been assigned to him to strengthen the security policies of the company, including its password policies. However, due to some old applications, Adam is only able to enforce a password group policy in Active Directory with a minimum of
10 characters. He informed the employees of the company, that the new password policy requires that everyone must have complex passwords with at least 14 characters. Adam wants to ensure that everyone is using complex passwords that meet the new security policy requirements. He logged on to one of the network's domain controllers and runs the following command:

Which of the following actions will this command take?

• A.Dumps the SAM password file to pwd.txt
• B.Dumps the Active Directory password hashes to pwd.txt
• C.The password history file is transferred to pwd.txt
• D.Dumps the SAM password hashes to pwd.txt

Comment: *

Name: *

Email: *

Verification: *

You work as a Senior Marketing Manager for Umbrella Inc. You find out that some of the software applications on the systems were malfunctioning and also you were not able to access your remote desktop session. You suspected that some malicious attack was performed on the network of the company. You immediately called the incident response team to handle the situation who enquired the Network Administrator to acquire all relevant information regarding the malfunctioning. The Network Administrator informed the incident response team that he was reviewing the security of the network which caused all these problems. Incident response team announced that this was a controlled event not an incident.
Which of the following steps of an incident handling process was performed by the incident response team?

• A.Containment
• B.Eradication
• C.Preparation
• D.Identification

Comment: *

Name: *

Email: *

Verification: *