Which of the following test makes sure the modified or new system includes appropriate access controls and does not introduce any security holes that might compromise other systems?

• A.Recovery testing
• B.Security testing
• C.Stress/volume testing
• D.Interface testing

Comment: *

Name: *

Email: *

Verification: *

As part of an application penetration testing process, session hijacking can BEST be achieved by which of the following?

• A.Known-plaintext attack
• B.Denial of Service (DoS)
• C.Cookie manipulation
• D.Structured Query Language (SQL) injection

Comment: *

Name: *

Email: *

Verification: *

Which statement below is the BEST example of separation of duties?

• A.Getting users to divulge their passwords.
• B.An activity that checks on the system, its users, or the environment.
• C.One person initiates a request for a payment and another authorizes that same payment.
• D.A data entry clerk may not have access to run database analysis reports.

Comment: *

Name: *

Email: *

Verification: *

Readable is to unreadable just as plain text is to _____?

• A.Cipher Text
• B.Encryption
• C.Unplain Text
• D.Digitally Signed

Comment: *

Name: *

Email: *

Verification: *

A pen register is a:

• A.Device that records the caller-ID of incoming calls
• B.Device that records the URLs accessed by an individual
• C.Device that identifies the cell in which a mobile phone is operating
• D.Device that records all the numbers dialed from a specific telephone line

Comment: *

Name: *

Email: *

Verification: *