What is the main problem with relying solely on firewalls to protect your company's sensitive data?

• A.Their value is limited because operating systems are now automatically patched.
• B.Their value is limited unless a full-featured Intrusion Detection System is used.
• C.Their value is limited because they can be bypassed by technical and non-technical means.
• D.Their value is limited because they cannot be changed once they are configured.

Comment: *

Name: *

Email: *

Verification: *

You work as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network.
You are required to search for the error messages in the /var/log/messages log file. Which of the following commands will you use to accomplish this?

• A.ps /var/log/messages
• B.cat /var/log/messages | look error
• C.cat /var/log/messages | grep error
• D.cat /var/log/messages

Comment: *

Name: *

Email: *

Verification: *

The following three steps belong to the chain of custody for federal rules of evidence. What additional step is recommended between steps 2 and 3?
STEP 1 - Take notes: who, what, where, when and record serial numbers of machine(s) in question.
STEP 2 - Do a binary backup if data is being collected.
STEP 3 - Deliver collected evidence to law enforcement officials.

• A.Take photographs of all persons who have had access to the computer.
• B.Conduct a forensic analysis of all evidence collected BEFORE starting the chain of custody.
• C.Rebuild the original hard drive from scratch, and sign and seal the good backup in a plastic bag.
• D.Check the backup integrity using a checksum utility like MD5, and sign and seal each piece of collected evidence in a plastic bag.

Comment: *

Name: *

Email: *

Verification: *

You have reason to believe someone with a domain user account has been accessing and modifying sensitive spreadsheets on one of your application servers. You decide to enable auditing for the files to see who is accessing and changing them. You enable the Audit Object Access policy on the files via Group Policy. Two weeks later, when you check on the audit logs, you see they are empty. What is the most likely reason this has happened?

• A.You did not save the change to the policy
• B.You did not enable auditing on the files
• C.You cannot enable auditing on files, just folders
• D.The person modifying the files turned off auditing

Comment: *

Name: *

Email: *

Verification: *

An IT security manager is trying to quickly assess the risks associated with not implementing a corporate firewall system. What sort of risk assessment is most appropriate?

• A.Quantitative risk assessment
• B.Qualitative risk assessment
• C.Annualized Risk Assessment
• D.Iterative Risk Assessment
• E.Technical Risk Assessment

Comment: *

Name: *

Email: *

Verification: *