To determine how a security breach occurred on the corporate network, a security manager looks at the logs of various devices. Which of the following BEST facilitates the correlation and review of these logs?

• A.Database server
• B.Domain name server (DNS)
• C.Time server
• D.Proxy server

Comment: *

Name: *

Email: *

Verification: *

In assessing the degree to which an organization may be affected by new privacy legislation, information security management should FIRST:

• A.develop an operational plan for achieving compliance with the legislation.
• B.identify systems and processes that contain privacy components.
• C.restrict the collection of personal information until compliant.
• D.identify privacy legislation in other countries that may contain similar requirements.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST immediate consequence of failing to tune a newly installed intrusion detection system (IDS) with the threshold set to a low value?

• A.The number of false positives increases
• B.The number of false negatives increases
• C.Active probing is missed
• D.Attack profiles are ignored

Comment: *

Name: *

Email: *

Verification: *

An online bank identifies a successful network attack in progress. The bank should FIRST:

• A.isolate the affected network segment.
• B.report the root cause to the board of directors.
• C.assess whether personally identifiable information (Pll) is compromised.
• D.shut down the entire network.

Comment: *

Name: *

Email: *

Verification: *

The root cause of a successful cross site request forgery (XSRF) attack against an application is that the vulnerable application:

• A.uses multiple redirects for completing a data commit transaction.
• B.has implemented cookies as the sole authentication mechanism.
• C.has been installed with a non-legitimate license key.
• D.is hosted on a server along with other applications.

Comment: *

Name: *

Email: *

Verification: *