New Questions 1

You have implemented a version of the Kerberos protocol for your network. What service does Kerberos primarily offer?

A. Authentication

B. Encryption

C. Non-repudiation

D. Data integrity

New Questions 2

A distributed denial-of-service (DDOS) attack has occurred where both ICMP and TCP packets have crashed the company's Web server. Which of the following techniques will best help reduce the severity of this attack?

A. Filtering traffic at the firewall

B. Changing your ISP

C. Installing Apache Server rather than Microsoft IIS

D. Placing the database and the Web server on separate systems

New Questions 3

You are using a PKI solution that is based on Secure Sockets Layer (SSL). Which of the following describes the function of the asymmetric-key-encryption algorithm used?

A. It encrypts the symmetric key.

B. It encrypts all of the data.

C. It encrypts the hash code used for data integrity.

D. It encrypts the X.509 key.

New Questions 4

Which choice lists typical firewall functions?

A. Creating a VLAN and configuring the intrusion-detection system

B. Issuing alerts and limiting host access

C. Logging traffic and creating a choke point

D. Implementing the security policy and scanning the internal network

New Questions 5

You are creating an information security policy for your company. Which of the following activities will help you focus on creating policies for the most important resources?

A. Auditing the firewall

B. Implementing non-repudiation

C. Logging users

D. Classifying systems

New Questions 6

Which of the following is the most likely first step to enable a server to recover from a denial-of-service attack in which all hard disk data is lost?

A. Enable virtualization

B. Contact the backup service

C. Contact a disk recovery service

D. Rebuild your RAID 0 array

New Questions 7

Jason is attempting to gain unauthorized access to a corporate server by running a program that enters passwords from a long list of possible passwords. Which type of attack is this?

A. Brute force

B. Denial of service

C. Botnet

D. Buffer overflow

New Questions 8

Which tool is best suited for identifying applications and code on a Web server that can lead to a SQL injection attack?

A. A vulnerability scanner

B. A packet sniffer

C. An intrusion-detection system

D. A network switch

New Questions 9

Which of the following is most likely to pose a security threat to a Web server?

A. CGI scripts

B. Database connections

C. Flash or Silverlight animation files

D. LDAP servers

New Questions 10

Which of the following will best help you ensure a database server can withstand a recently discovered vulnerability?

A. Updating the company vulnerability scanner and conducting a new scan

B. Adding a buffer overflow rule to the intrusion detection system

C. Reconfiguring the firewall

D. Installing a system update