Management within your organization has defined a use case to support confidentiality of
PII stored in a database. Which of the following solutions will BEST meet this need?
a. Hashing
b. Digital Signature
c. Encryption
d. Smart Card - ANSWER Encryption
Management has implemented a policy stating that messages sent between upper-level
executives must arrive without any changes. The IT department us tasked with
implementing technical controls to meet this need. Which security goal does this policy
address?
a. Confidentiality
b. Integrity
c. Availability
d. Authentication - ANSWER Integrity
Your organization recently implemented two servers that act as failover deceives for each
other. Which security goal is your organization pursuing?
a. Obfuscation
b. Integrity
c. Confidentiality
d. Availability - ANSWER Availability
1
,You are tasked with improving the overall security for a database server. Which of the
following is a preventive control that will assist with this goal?
a. Disabling unnecessary services
b. Identifying the initial baseline configuration
c. Monitoring logs for trends
d. Implementing a backup and restoration plan - ANSWER Disabling unnecessary
services
An IT department recently had its hardware budget reduced, but the organization still
expects them to maintain availability of services. Of the following choices, what would BEST
help them maintain availability with a reduced budget?
a. Failover clusters
b. Virtualization
c. Bollards
d. Hashing - ANSWER Virtualization
You want to test new security controls before deploying them. Which of the following
technologies provides the MOST flexibility to meet this goal?
a. Baselines
b. Hardening techniques
c. Virtualization technologies
d. Patch management programs - ANSWER Virtualization technologies
You suspect that traffic in your network is being rerouted to an unauthorized router within
your network. Which of the following command-line tools would help you narrow down the
problem?
a. ping
b. tracert
c. ipconfig
d. netstat - ANSWER tracert
2
, The First Bank of Springfield has been experiencing widespread fraud recently. Attackers are
transferring funds out of customer accounts to other banks. The bank began requiring
customers to obtain credentials in person at the bank. However, this hasn't reduced the
number of fraudulent transactions. After reviewing available logs, investigators determined
that these fraudulent transactions are conducted with the customer's actual credentials.
Which of the following security controls should be strengthened to reduce these incidents?
a. Authentication
b. Identification
c. Accounting
d. Authorization - ANSWER Authentication
An outside security auditor recently completed an in-depth security audit on your network.
One of the issues he reported was related to passwords. Specifically, he found the following
passwords used on the network: Pa$$, 1@W2, and G7bT3. What should be changed to avoid
the problem shown with these passwords?
a. Password complexity
b. Password length
c. Password history
d. Password reuse - ANSWER Password length
When you log on to your online bank account, you are also able to access a partner's credit
card site, check-ordering services, and a mortgage site without entering your credentials
again. What does this describe?
a. SSO
b. Same sign-on
c. SAML
d. kerberos - ANSWER SSO
Your network uses an authentication service based on the X.500 specification. When
encrypted, it uses TLS. Which authentication service is your network using?
3
PII stored in a database. Which of the following solutions will BEST meet this need?
a. Hashing
b. Digital Signature
c. Encryption
d. Smart Card - ANSWER Encryption
Management has implemented a policy stating that messages sent between upper-level
executives must arrive without any changes. The IT department us tasked with
implementing technical controls to meet this need. Which security goal does this policy
address?
a. Confidentiality
b. Integrity
c. Availability
d. Authentication - ANSWER Integrity
Your organization recently implemented two servers that act as failover deceives for each
other. Which security goal is your organization pursuing?
a. Obfuscation
b. Integrity
c. Confidentiality
d. Availability - ANSWER Availability
1
,You are tasked with improving the overall security for a database server. Which of the
following is a preventive control that will assist with this goal?
a. Disabling unnecessary services
b. Identifying the initial baseline configuration
c. Monitoring logs for trends
d. Implementing a backup and restoration plan - ANSWER Disabling unnecessary
services
An IT department recently had its hardware budget reduced, but the organization still
expects them to maintain availability of services. Of the following choices, what would BEST
help them maintain availability with a reduced budget?
a. Failover clusters
b. Virtualization
c. Bollards
d. Hashing - ANSWER Virtualization
You want to test new security controls before deploying them. Which of the following
technologies provides the MOST flexibility to meet this goal?
a. Baselines
b. Hardening techniques
c. Virtualization technologies
d. Patch management programs - ANSWER Virtualization technologies
You suspect that traffic in your network is being rerouted to an unauthorized router within
your network. Which of the following command-line tools would help you narrow down the
problem?
a. ping
b. tracert
c. ipconfig
d. netstat - ANSWER tracert
2
, The First Bank of Springfield has been experiencing widespread fraud recently. Attackers are
transferring funds out of customer accounts to other banks. The bank began requiring
customers to obtain credentials in person at the bank. However, this hasn't reduced the
number of fraudulent transactions. After reviewing available logs, investigators determined
that these fraudulent transactions are conducted with the customer's actual credentials.
Which of the following security controls should be strengthened to reduce these incidents?
a. Authentication
b. Identification
c. Accounting
d. Authorization - ANSWER Authentication
An outside security auditor recently completed an in-depth security audit on your network.
One of the issues he reported was related to passwords. Specifically, he found the following
passwords used on the network: Pa$$, 1@W2, and G7bT3. What should be changed to avoid
the problem shown with these passwords?
a. Password complexity
b. Password length
c. Password history
d. Password reuse - ANSWER Password length
When you log on to your online bank account, you are also able to access a partner's credit
card site, check-ordering services, and a mortgage site without entering your credentials
again. What does this describe?
a. SSO
b. Same sign-on
c. SAML
d. kerberos - ANSWER SSO
Your network uses an authentication service based on the X.500 specification. When
encrypted, it uses TLS. Which authentication service is your network using?
3
