Kerberos is vulnerable to replay in which of the following circumstances?

• A.When a private key is compromised within an allotted time window.
• B.When a public key is compromised within an allotted time window.
• C.When a ticket is compromised within an allotted time window.
• D.When the KSD is compromised within an allotted time window.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be the best reason for separating the test and development environments?

• A.To restrict access to systems under test.
• B.To control the stability of the test environment.
• C.To segregate user and development staff.
• D.To secure access to systems under development.

Comment: *

Name: *

Email: *

Verification: *

What is the main characteristic of a bastion host?

• A.It is located on the internal network.
• B.It is a hardened computer implementation
• C.It is a firewall.
• D.It does packet filtering.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a not a preventative control?

• A.Deny programmer access to production data.
• B.Require change requests to include information about dates, descriptions, cost analysis and anticipated effects.
• C.Run a source comparison program between control and current source periodically.
• D.Establish procedures for emergency changes.

Comment: *

Name: *

Email: *

Verification: *

When should a post-mortem review meeting be held after an intrusion has been properly taken care of?

• A.Within the first three months after the investigation of the intrusion is completed.
• B.Within the first week after prosecution of intruders have taken place, whether successful or not.
• C.Within the first month after the investigation of the intrusion is completed.
• D.Within the first week of completing the investigation of the intrusion.

Comment: *

Name: *

Email: *

Verification: *