SY0-401 Exam Dumps | A network administrator is responsible for securing applications against external attacks. Every month,

<< Prev Question Next Question >>

Question 349/800

A network administrator is responsible for securing applications against external attacks. Every month, the
underlying operating system is updated. There is no process in place for other software updates.
Which of the following processes could MOST effectively mitigate these risks?

A. Application hardening

B. Application change management

C. Application patch management

D. Application firewall review

Question List (800q): Question 1: Which of the following is a requirement when implementing PK...; Question 2: A new security policy being implemented requires all email w...; Question 3: A user attempts to install new and relatively unknown softwa...; Question 4: After working on his doctoral dissertation for two years, Jo...; Question 5: Jane, a VPN administrator, was asked to implement an encrypt...; Question 6: Which of the following BEST describes a SQL Injection attack...; Question 7: The security manager must store a copy of a sensitive docume...; Question 8: Using a protocol analyzer, a security consultant was able to...; Question 9: A user attempting to log on to a workstation for the first t...; Question 10: Which of the following encompasses application patch managem...; Question 11: Which of the following is considered a risk management BEST ...; Question 12: A network administrator noticed various chain messages have ...; Question 13: In Kerberos, the Ticket Granting Ticket (TGT) is used for th...; Question 14: Jane has recently implemented a new network design at her or...; Question 15: A security administrator develops a web page and limits inpu...; Question 16: A security technician received notification of a remotely ex...; Question 17: A Human Resources user is issued a virtual desktop typically...; Question 18: A security administrator wants to test the reliability of an...; Question 19: A company is starting to allow employees to use their own pe...; Question 20: Users in the HR department were recently informed that they ...; Question 21: Which of the following is a control that allows a mobile app...; Question 22: A security administrator wants to check user password comple...; Question 23: A malicious individual used an unattended customer service k...; Question 24: Which of the following will help prevent smurf attacks?...; Question 25: Employee badges are encoded with a private encryption key an...; Question 26: An administrator notices an unusual spike in network traffic...; Question 27: Identifying residual is MOST important to which of the follo...; Question 28: Which of the following can only be mitigated through the use...; Question 29: Which of the following components MUST be trusted by all par...; Question 30: It has been discovered that students are using kiosk tablets...; Question 31: Which of the following is the BEST way to prevent Cross-Site...; Question 32: An administrator is investigating a system that may potentia...; Question 33: A company would like to take electronic orders from a partne...; Question 34: Joe, a company's network engineer, is concerned that protoco...; Question 35: Which of the following is an important step in the initial s...; Question 36: A database administrator would like to start encrypting data...; Question 37: A computer is suspected of being compromised by malware. The...; Question 38: Which of the following BEST describes part of the PKI proces...; Question 39: While an Internet café a malicious user is causing all surro...; Question 40: Which of the following would provide the STRONGEST encryptio...; Question 41: One of the findings of risk assessment is that many of the s...; Question 42: Vendors typically ship software applications with security s...; Question 43: A small company has recently purchased cell phones for manag...; Question 44: Which of the following should be enabled in a laptop's BIOS ...; Question 45: Users require access to a certain server depending on their ...; Question 46: Joe has read and write access to his own home directory. Joe...; Question 47: Matt, an IT administrator, wants to protect a newly built se...; Question 48: Which of the following is the BEST practice when dealing wit...; Question 49: Which of the following tools would allow Ann, the security a...; Question 50: A security administrator at a company which implements key e...; Question 51: Which of the following can BEST help prevent cross-site scri...; Question 52: When an order was submitted via the corporate website, an ad...; Question 53: A network administrator has a separate user account with rig...; Question 54: One of the senior managers at a company called the help desk...; Question 55: After a security incident involving a physical asset, which ...; Question 56: Which of the following solutions provides the most flexibili...; Question 57: Company XYZ has encountered an increased amount of buffer ov...; Question 58: A company executive's laptop was compromised, leading to a s...; Question 59: Which of the following would be used to identify the securit...; Question 60: Which of the following techniques describes the use of appli...; Question 61: Which of the following is used to certify intermediate autho...; Question 62: HOTSPOT Select the appropriate attack from each drop down li...; Question 63: Which of the following would an attacker use to generate and...; Question 64: Prior to leaving for an extended vacation, Joe uses his mobi...; Question 65: Which of the following devices is BEST suited for servers th...; Question 66: The security administrator is observing unusual network beha...; Question 67: Which of the following attacks impact the availability of a ...; Question 68: Which of the following is the MOST likely cause of users bei...; Question 69: During a security assessment, an administrator wishes to see...; Question 70: Which of the following access controls enforces permissions ...; Question 71: Ann a network administrator has been tasked with strengtheni...; Question 72: During a routine audit a web server is flagged for allowing ...; Question 73: The security administrator is analyzing a user's history fil...; Question 74: Which of the following would a security administrator implem...; Question 75: Mike, a security professional, is tasked with actively verif...; Question 76: Which of the following is an example of a false positive?...; Question 77: Ann, a security administrator, is strengthening the security...; Question 78: Which of the following is the difference between identificat...; Question 79: Which of the following provides dedicated hardware-based cry...; Question 80: The string: ' or 1=1-- - Which of the following represents i...; Question 81: Which of the following steps of incident response does a tea...; Question 82: Data execution prevention is a feature in most operating sys...; Question 83: The system administrator is tasked with changing the adminis...; Question 84: On a train, an individual is watching a proprietary video on...; Question 85: Which of the following attacks could be used to initiate a s...; Question 86: A recent audit has discovered that at the time of password e...; Question 87: An administrator notices that former temporary employees' ac...; Question 88: After analyzing and correlating activity from multiple senso...; Question 89: Which of the following represents a cryptographic solution w...; Question 90: Vendors typically ship software applications with security s...; Question 91: Ann a security technician receives a report from a user that...; Question 92: The librarian wants to secure the public Internet kiosk PCs ...; Question 93: An attacker attempted to compromise a web form by inserting ...; Question 94: Certificates are used for: (Choose two.)...; Question 95: Allowing unauthorized removable devices to connect to comput...; Question 96: Establishing a method to erase or clear cluster tips is an e...; Question 97: An administrator is instructed to disable IP-directed broadc...; Question 98: Which of the following describes how Sara, an attacker, can ...; Question 99: A software development company wants to implement a digital ...; Question 100: The access control list (ACL) for a file on a server is as f...; Question 101: An encrypted message is sent using PKI from Sara, a client, ...; Question 102: Users report that they are unable to access network printing...; Question 103: The ore-sales engineering team needs to quickly provide accu...; Question 104: Joe is the accounts payable agent for ABC Company. Joe has b...; Question 105: Company XYZ recently salvaged company laptops and removed al...; Question 106: Which of the following authentication services combines auth...; Question 107: Which of the following types of security controls are visibl...; Question 108: Which of the following MUST be updated immediately when an e...; Question 109: An employee needs to connect to a server using a secure prot...; Question 110: Which of the following would be MOST appropriate if an organ...; Question 111: Sara, a security administrator, manually hashes all network ...; Question 112: A security administrator has concerns that employees are ins...; Question 113: A company is about to release a very large patch to its cust...; Question 114: A company has been attacked and their website has been alter...; Question 115: Some customers have reported receiving an untrusted certific...; Question 116: Maintenance workers find an active network switch hidden abo...; Question 117: A company hosts its public websites internally. The administ...; Question 118: During a disaster recovery planning session, a security admi...; Question 119: Which of the following is a hardware-based security technolo...; Question 120: A security assurance officer is preparing a plan to measure ...; Question 121: Public key certificates and keys that are compromised or wer...; Question 122: A large corporation has data centers geographically distribu...; Question 123: Which of the following types of security services are used t...; Question 124: The security manager reports that the process of revoking ce...; Question 125: Which of the following should be done before resetting a use...; Question 126: Which of the following means a password history value of thr...; Question 127: Users are utilizing thumb drives to connect to USB ports on ...; Question 128: In order to use a two-way trust model the security administr...; Question 129: Sara, a user, downloads a keygen to install pirated software...; Question 130: During an anonymous penetration test, Jane, a system adminis...; Question 131: Which of the following was launched against a company based ...; Question 132: A system administrator is notified by a staff member that th...; Question 133: A company's password and authentication policies prohibit th...; Question 134: Which of the following offers the LEAST secure encryption ca...; Question 135: Which of the following was based on a previous X.500 specifi...; Question 136: Which of the following controls can be implemented together ...; Question 137: Which of the following will allow Pete, a security analyst, ...; Question 138: Company employees are required to have workstation client ce...; Question 139: Digital signatures are used for ensuring which of the follow...; Question 140: After a company has standardized to a single operating syste...; Question 141: Which of the following authentication services should be rep...; Question 142: Which of the following malware types may require user intera...; Question 143: A security technician at a small business is worried about t...; Question 144: After visiting a website, a user receives an email thanking ...; Question 145: Two programmers write a new secure application for the human...; Question 146: An administrator finds that non-production servers are being...; Question 147: The Chief Security Officer (CSO) for a datacenter in a hosti...; Question 148: Which of the following network devices is used to analyze tr...; Question 149: Which of the following incident response plan steps would MO...; Question 150: A large multinational corporation with networks in 30 countr...; Question 151: During the information gathering stage of a deploying role-b...; Question 152: Ann, the security administrator, wishes to implement multifa...; Question 153: The marketing department wants to distribute pens with embed...; Question 154: A small company has recently purchased cell phones for manag...; Question 155: Which of the following attacks involves the use of previousl...; Question 156: A system administrator has noticed network performance issue...; Question 157: How must user accounts for exiting employees be handled?...; Question 158: A company needs to receive data that contains personally ide...; Question 159: Human Resources suspects an employee is accessing the employ...; Question 160: A network technician is configuring clients for VLAN access....; Question 161: What is a system that is intended or designed to be broken i...; Question 162: Several employee accounts appear to have been cracked by an ...; Question 163: Sara, a hacker, is completing a website form to request a fr...; Question 164: The security department has implemented a new laptop encrypt...; Question 165: An administrator is concerned that a company's web server ha...; Question 166: A company needs to provide web-based access to shared data s...; Question 167: A periodic update that corrects problems in one version of a...; Question 168: A company wants to prevent end users from plugging unapprove...; Question 169: Highly sensitive data is stored in a database and is accesse...; Question 170: Ann, the software security engineer, works for a major softw...; Question 171: In order to enter a high-security datacenter, users are requ...; Question 172: A systems administrator has implemented PKI on a classified ...; Question 173: An administrator has a network subnet dedicated to a group o...; Question 174: After Ann, a user, logs into her banking websites she has ac...; Question 175: An SSL/TLS private key is installed on a corporate web proxy...; Question 176: Which of the following assessment techniques would a securit...; Question 177: Jane, a security administrator, has been tasked with explain...; Question 178: Which of the following is mainly used for remote access into...; Question 179: In order to maintain oversight of a third party service prov...; Question 180: Which of the following is an important implementation consid...; Question 181: A new virtual server was created for the marketing departmen...; Question 182: A large bank has moved back office operations offshore to an...; Question 183: A security administrator suspects that an employee in the IT...; Question 184: Suspicious traffic without a specific signature was detected...; Question 185: Which of the following is true about PKI? (Choose two.)...; Question 186: DRAG DROP A security administrator is given the security and...; Question 187: A network administrator is configuring access control for th...; Question 188: Internet banking customers currently use an account number a...; Question 189: Physical documents must be incinerated after a set retention...; Question 190: The finance department just procured a software application ...; Question 191: Which of the following is the BEST technology for the sender...; Question 192: A company has purchased an application that integrates into ...; Question 193: A recently installed application update caused a vital appli...; Question 194: Which of the following could cause a browser to display the ...; Question 195: An administrator needs to submit a new CSR to a CA. Which of...; Question 196: RC4 is a strong encryption protocol that is generally used w...; Question 197: Which of the following can be used on a smartphone to BEST p...; Question 198: Which of the following tests a number of security controls i...; Question 199: Joe, a web developer, wants to make sure his application is ...; Question 200: Matt, a security consultant, has been tasked with increasing...; Question 201: The IT department has setup a website with a series of quest...; Question 202: A technician wants to implement a dual factor authentication...; Question 203: A resent OS patch caused an extended outage. It took the IT ...; Question 204: Jane, an individual, has recently been calling various finan...; Question 205: An organization has a need for security control that identif...; Question 206: A Chief Information Security Officer (CISO) wants to impleme...; Question 207: A security administrator is auditing a database server to en...; Question 208: A security administrator wants to block unauthorized access ...; Question 209: Which of the following MOST interferes with network-based de...; Question 210: Company A submitted a bid on a contract to do work for Compa...; Question 211: A new security analyst is given the task of determining whet...; Question 212: Which of the following access methods uses radio frequency w...; Question 213: A CA is compromised and attacks start distributing malicious...; Question 214: Which of the following is characterized by an attacker attem...; Question 215: Which of the following types of logs could provide clues tha...; Question 216: Which of the following is an indication of an ongoing curren...; Question 217: An administrator needs to renew a certificate for a web serv...; Question 218: A company needs to receive data that contains personally ide...; Question 219: After encrypting all laptop hard drives, an executive office...; Question 220: A company hired Joe, an accountant. The IT administrator wil...; Question 221: A video surveillance audit recently uncovered that an employ...; Question 222: While working on a new project a security administrator want...; Question 223: A security administrator must implement a network that is im...; Question 224: A user has forgotten their account password. Which of the fo...; Question 225: A corporation has experienced several media leaks of proprie...; Question 226: Each server on a subnet is configured to only allow SSH acce...; Question 227: Which of the following is an important step in the initial s...; Question 228: Without validating user input, an application becomes vulner...; Question 229: Which of the following is the BEST method for ensuring all f...; Question 230: Which of the following is the BEST way to prevent Cross-Site...; Question 231: Mike, a user, states that he is receiving several unwanted e...; Question 232: The security consultant is assigned to test a client's new s...; Question 233: An internal auditing team would like to strengthen the passw...; Question 234: Which of the following can be implemented in hardware or sof...; Question 235: An administrator uses a server with a trusted OS and is conf...; Question 236: Use of group accounts should be minimized to ensure the foll...; Question 237: Which of the following can be used to mitigate risk if a mob...; Question 238: A hospital IT department wanted to secure its doctor's table...; Question 239: Which of the following types of wireless attacks would be us...; Question 240: Which of the following allows a company to maintain access t...; Question 241: Ann has taken over as the new head of the IT department. One...; Question 242: When employees that use certificates leave the company they ...; Question 243: Which of the following would MOST likely involve GPS?...; Question 244: A security administrator wants to deploy security controls t...; Question 245: The chief Risk officer is concerned about the new employee B...; Question 246: A company hires outside security experts to evaluate the sec...; Question 247: Identifying a list of all approved software on a system is a...; Question 248: Joe needs to track employees who log into a confidential dat...; Question 249: A security administrator needs a locally stored record to re...; Question 250: One of the servers on the network stops responding due to la...; Question 251: A security administrator must implement a system to allow cl...; Question 252: A company requires that all users enroll in the corporate PK...; Question 253: A security administrator must implement a wireless encryptio...; Question 254: Which of the following techniques can be used to prevent the...; Question 255: An email client says a digital signature is invalid and the ...; Question 256: A CRL is comprised of.; Question 257: A software development company has hired a programmer to dev...; Question 258: Which of the following provides Digital Signatures?...; Question 259: Which of the following security benefits would be gained by ...; Question 260: A security specialist has been asked to evaluate a corporate...; Question 261: A security administrator is reviewing the below output from ...; Question 262: An administrator has successfully implemented SSL on srv4.co...; Question 263: Which of the following protocols is the security administrat...; Question 264: Which of the following is used to verify data integrity?...; Question 265: Joe, a user, wants to protect sensitive information stored o...; Question 266: Which of the following is described as an attack against an ...; Question 267: Which of the following is the practice of marking open wirel...; Question 268: Pete, an employee, is terminated from the company and the le...; Question 269: During an audit, the security administrator discovers that t...; Question 270: Which of the following does full disk encryption prevent?...; Question 271: Which of the following MUST Matt, a security administrator, ...; Question 272: A program has been discovered that infects a critical Window...; Question 273: Company A sends a PGP encrypted file to company B. If compan...; Question 274: A team of firewall administrators have access to a `master p...; Question 275: Given the following list of corporate access points, which o...; Question 276: ABC company has a lot of contractors working for them. The p...; Question 277: An administrator has two servers and wants them to communica...; Question 278: A security administrator wants to get a real time look at wh...; Question 279: Which of the following authentication provides users XML for...; Question 280: Which of the following password attacks is MOST likely to cr...; Question 281: A user has plugged in a wireless router from home with defau...; Question 282: Pete, an employee, needs a certificate to encrypt data. Whic...; Question 283: Which of the following is an XML based open standard used in...; Question 284: Which of the following is the below pseudo-code an example o...; Question 285: Matt, a security administrator, wants to ensure that the mes...; Question 286: Ann, a security analyst, is preparing for an upcoming securi...; Question 287: Which of the following explains the difference between a pub...; Question 288: A security administrator has been tasked with setting up a n...; Question 289: The BEST methods for a web developer to prevent the website ...; Question 290: Users can authenticate to a company's web applications using...; Question 291: A security technician is working with the network firewall t...; Question 292: Pete, the system administrator, has concerns regarding users...; Question 293: A user attempts to install a new and relatively unknown soft...; Question 294: A new intern was assigned to the system engineering departme...; Question 295: An IT auditor tests an application as an authenticated user....; Question 296: While opening an email attachment, Pete, a customer, receive...; Question 297: Which of the following MOST interferes with network-based de...; Question 298: A technician is reviewing the logical access control method ...; Question 299: Joe, an employee, was escorted from the company premises due...; Question 300: An insurance company requires an account recovery process so...; Question 301: A security administrator is concerned about the strength of ...; Question 302: An organization has introduced token-based authentication to...; Question 303: Which of the following types of cloud computing would be MOS...; Question 304: A bank has recently deployed mobile tablets to all loan offi...; Question 305: The chief Risk officer is concerned about the new employee B...; Question 306: Which of the following can a security administrator implemen...; Question 307: Which of the following is replayed during wireless authentic...; Question 308: A company's employees were victims of a spear phishing campa...; Question 309: A new web server has been provisioned at a third party hosti...; Question 310: Which of the following are examples of detective controls?...; Question 311: Which of the following software allows a network administrat...; Question 312: Matt, the Chief Information Security Officer (CISO), tells t...; Question 313: Which of the following should be used when a business needs ...; Question 314: One month after a software developer was terminated, the hel...; Question 315: Which of the following are examples of network segmentation?...; Question 316: Which of the following hardware based encryption devices is ...; Question 317: Which of the following provides RADIUS?...; Question 318: Which of the following can be used as an equipment theft det...; Question 319: Methods to test the responses of software and web applicatio...; Question 320: Disabling unnecessary services, restricting administrative a...; Question 321: Which of the following attacks targets high level executives...; Question 322: A recent audit has revealed weaknesses in the process of dep...; Question 323: When designing a corporate NAC solution, which of the follow...; Question 324: A company requires that a user's credentials include providi...; Question 325: Which of the following wireless security measures can an att...; Question 326: A security manager requires fencing around the perimeter, an...; Question 327: Which of the following can be used to maintain a higher leve...; Question 328: Which of the following describes purposefully injecting extr...; Question 329: Which of the following uses both a public and private key?...; Question 330: A way to assure data at-rest is secure even in the event of ...; Question 331: The IT department has set up a share point site to be used o...; Question 332: A password audit has revealed that a significant percentage ...; Question 333: The help desk is experiencing a higher than normal amount of...; Question 334: A user was reissued a smart card after the previous smart ca...; Question 335: The call center supervisor has reported that many employees ...; Question 336: Use of a smart card to authenticate remote servers remains M...; Question 337: After a security incident involving a physical asset, which ...; Question 338: The Quality Assurance team is testing a new third party deve...; Question 339: A computer is suspected of being compromised by malware. The...; Question 340: Which of the following allows an organization to store a sen...; Question 341: Which of the following is synonymous with a server's certifi...; Question 342: A financial company requires a new private network link with...; Question 343: A new MPLS network link has been established between a compa...; Question 344: Pete, the compliance manager, wants to meet regulations. Pet...; Question 345: Which of the following describes a type of malware which is ...; Question 346: Due to hardware limitation, a technician must implement a wi...; Question 347: Which of the following may cause Jane, the security administ...; Question 348: A bank has a fleet of aging payment terminals used by mercha...; Question 349: A network administrator is responsible for securing applicat...; Question 350: SIMULATION A security administrator discovers that an attack...; Question 351: Which of the following is commonly LDAP and Kerberos used fo...; Question 352: The Chief Security Officer (CSO) is contacted by a first res...; Question 353: A new application needs to be deployed on a virtual server. ...; Question 354: A business has set up a Customer Service kiosk within a shop...; Question 355: Access mechanisms to data on encrypted USB hard drives must ...; Question 356: A company's security administrator wants to manage PKI for i...; Question 357: Matt, an administrator, is concerned about the wireless netw...; Question 358: While setting up a secure wireless corporate network, which ...; Question 359: The security administrator installed a newly generated SSL c...; Question 360: Joe, a user, reports to the system administrator that he is ...; Question 361: Which of the following is a measure of biometrics performanc...; Question 362: Which of the following is a common coding error in which bou...; Question 363: A group policy requires users in an organization to use stro...; Question 364: Which of the following devices will help prevent a laptop fr...; Question 365: A user commuting to work via public transport received an of...; Question 366: Ann, a software developer, has installed some code to reacti...; Question 367: How often, at a MINIMUM, should Sara, an administrator, revi...; Question 368: Sara, an attacker, is recording a person typing in their ID ...; Question 369: Pete, the security administrator, has been notified by the I...; Question 370: Which of the following allows lower level domains to access ...; Question 371: Which of the following can use RC4 for encryption? (Choose t...; Question 372: Which of the following provides a user ID and password toget...; Question 373: Which of the following is true about an email that was signe...; Question 374: A network administrator has identified port 21 being open an...; Question 375: A security administrator looking through IDS logs notices th...; Question 376: A security administrator wants to ensure that the message th...; Question 377: A company wants to ensure that all aspects if data are prote...; Question 378: Which of the following is a vulnerability associated with di...; Question 379: Verifying the integrity of data submitted to a computer prog...; Question 380: Attempting to inject 50 alphanumeric key strokes including s...; Question 381: Which of the following is built into the hardware of most la...; Question 382: Using a heuristic system to detect an anomaly in a computer'...; Question 383: A security administrator is aware that a portion of the comp...; Question 384: Which of the following would prevent a user from installing ...; Question 385: A technician wants to verify the authenticity of the system ...; Question 386: Which of the following can be implemented with multiple bit ...; Question 387: Which of the following types of authentication packages user...; Question 388: A security technician has been asked to recommend an authent...; Question 389: Which of the following would Jane, an administrator, use to ...; Question 390: An administrator wants to ensure that the reclaimed space of...; Question 391: A system security analyst using an enterprise monitoring too...; Question 392: A security administrator is designing an access control syst...; Question 393: An administrator has advised against the use of Bluetooth ph...; Question 394: Which of the following types of attacks is based on coordina...; Question 395: Ann, the Chief Technology Officer (CTO), has agreed to allow...; Question 396: A network administrator is looking for a way to automaticall...; Question 397: The librarian wants to secure the public Internet kiosk PCs ...; Question 398: An attacker crafts a message that appears to be from a trust...; Question 399: Which of the following, if properly implemented, would preve...; Question 400: An administrator finds that non-production servers are being...; Question 401: A company recently experienced data loss when a server crash...; Question 402: A user has several random browser windows opening on their c...; Question 403: During a penetration test from the Internet, Jane, the syste...; Question 404: Timestamps and sequence numbers act as countermeasures again...; Question 405: A security administrator must implement all requirements in ...; Question 406: Which of the following is a notification that an unusual con...; Question 407: A system administrator has noticed vulnerability on a high i...; Question 408: A company is about to release a very large patch to its cust...; Question 409: Which of the following is BEST utilized to identify common m...; Question 410: A recent spike in virus detections has been attributed to en...; Question 411: Which of the following types of encryption will help in prot...; Question 412: A security technician is attempting to improve the overall s...; Question 413: Which of the following is a vulnerability associated with di...; Question 414: Which of the following types of data encryption would Matt, ...; Question 415: A security analyst performs the following activities: monito...; Question 416: The recovery agent is used to recover the:...; Question 417: Which of the following would a security administrator implem...; Question 418: Joe analyzed the following log and determined the security t...; Question 419: Which of the following is the term for a fix for a known sof...; Question 420: A program displays: ERROR: this program has caught an except...; Question 421: A computer is found to be infected with malware and a techni...; Question 422: An IT security technician is actively involved in identifyin...; Question 423: Which of the following allows a network administrator to imp...; Question 424: A server administrator notes that a fully patched applicatio...; Question 425: Which of the following would be a reason for developers to u...; Question 426: An administrator is building a development environment and r...; Question 427: Which of the following types of application attacks would be...; Question 428: Pete, the compliance manager, wants to meet regulations. Pet...; Question 429: A Company has recently identified critical systems that supp...; Question 430: Which of the following is true about the CRL?...; Question 431: A user has unknowingly gone to a fraudulent site. The securi...; Question 432: Two organizations want to share sensitive data with one anot...; Question 433: The company's sales team plans to work late to provide the C...; Question 434: The IT department has installed new wireless access points b...; Question 435: Joe, an application developer, is building an external facin...; Question 436: A security administrator is investigating a recent server br...; Question 437: To ensure compatibility with their flagship product, the sec...; Question 438: A company wants to ensure that all credentials for various s...; Question 439: Which of the following describes the process of removing unn...; Question 440: A security manager installed a standalone fingerprint reader...; Question 441: A new mobile banking application is being developed and uses...; Question 442: Which of the following should a security technician implemen...; Question 443: Pete, a security analyst, has been tasked with explaining th...; Question 444: The software developer is responsible for writing the code a...; Question 445: Purchasing receives an automated phone call from a bank aski...; Question 446: Full disk encryption is MOST effective against the following...; Question 447: An organization is required to log all user internet activit...; Question 448: Which of the following types of attacks involves interceptio...; Question 449: Ann, a security analyst, has discovered that her company has...; Question 450: Which of the following BEST describes the type of attack tha...; Question 451: In order to enter a high-security data center, users are req...; Question 452: A process in which the functionality of an application is te...; Question 453: Which of the following can a security administrator implemen...; Question 454: A security administrator has installed a new KDC for the cor...; Question 455: An investigator recently discovered that an attacker placed ...; Question 456: Joe must send Ann a message and provide Ann with assurance t...; Question 457: An organization processes credit card transactions and is co...; Question 458: Matt, a forensic analyst, wants to obtain the digital finger...; Question 459: Which of the following data security techniques will allow M...; Question 460: The security administrator runs an rpm verify command which ...; Question 461: Which of the following technologies was developed to allow c...; Question 462: Which of the following provides the HIGHEST level of confide...; Question 463: Users have been reporting that their wireless access point i...; Question 464: The fundamental information security principals include conf...; Question 465: The information security technician wants to ensure security...; Question 466: Sara, an application developer, implemented error and except...; Question 467: Which of the following is an attack designed to activate bas...; Question 468: A security administrator has implemented a policy to prevent...; Question 469: A malicious individual is attempting to write too much data ...; Question 470: Which of the following can Joe, a security administrator, im...; Question 471: Although a vulnerability scan report shows no vulnerabilitie...; Question 472: Joe, a user, in a coffee shop is checking his email over a w...; Question 473: A user reports being unable to access a file on a network sh...; Question 474: Users report that after downloading several applications, th...; Question 475: An agent wants to create fast and efficient cryptographic ke...; Question 476: The finance department works with a bank which has recently ...; Question 477: Which of the following can be used to ensure digital certifi...; Question 478: Which of the following must be kept secret for a public key ...; Question 479: Ann, a security administrator, wishes to replace their RADIU...; Question 480: A server administrator notes that a legacy application often...; Question 481: Which of the following is a way to implement a technical con...; Question 482: Which of the following is a penetration testing method?...; Question 483: A merchant acquirer has the need to store credit card number...; Question 484: The process of making certain that an entity (operating syst...; Question 485: A security administrator has been tasked to ensure access to...; Question 486: Which of the following protocols is vulnerable to man-in-the...; Question 487: A computer security officer has investigated a possible data...; Question 488: A security administrator discovers an image file that has se...; Question 489: Which of the following services are used to support authenti...; Question 490: DRAG DROP Determine the types of attacks below by selecting ...; Question 491: A company has just deployed a centralized event log storage ...; Question 492: Users are trying to communicate with a network but are unabl...; Question 493: The public key is used to perform the following: (Choose thr...; Question 494: When reviewing a digital certificate for accuracy, which of ...; Question 495: Which of the following is an authentication method that can ...; Question 496: In an environment where availability is critical such as Ind...; Question 497: Which of the following tools would a security administrator ...; Question 498: Ann, the network administrator, has learned from the helpdes...; Question 499: Which of the following security concepts identifies input va...; Question 500: Which of the following authentication protocols makes use of...; Question 501: A security administrator wants to deploy security controls t...; Question 502: An administrator is assigned to monitor servers in a data ce...; Question 503: Which of the following can be used as an equipment theft det...; Question 504: Which of the following practices is used to mitigate a known...; Question 505: Which of the following can be used by a security administrat...; Question 506: A company has recently allowed employees to take advantage o...; Question 507: Identifying a list of all approved software on a system is a...; Question 508: Which of the following is replayed during wireless authentic...; Question 509: Which of the following is true about input validation in a c...; Question 510: Which of the following is public keys used for?...; Question 511: Which statement is TRUE about the operation of a packet snif...; Question 512: Which of the following ciphers would be BEST used to encrypt...; Question 513: The information security technician wants to ensure security...; Question 514: A way to assure data at-rest is secure even in the event of ...; Question 515: A security administrator is notified that users attached to ...; Question 516: Which of the following controls mitigates the risk of Matt, ...; Question 517: A system administrator is setting up a file transfer server....; Question 518: The security team would like to gather intelligence about th...; Question 519: Joe, an employee is taking a taxi through a busy city and st...; Question 520: Which of the following password attacks involves attempting ...; Question 521: Which of the following protocols encapsulates an IP packet w...; Question 522: Matt, a security analyst, needs to select an asymmetric encr...; Question 523: A security administrator forgets their card to access the se...; Question 524: Which of the following application attacks is used to gain a...; Question 525: A system administrator is configuring shared secrets on serv...; Question 526: A system administrator needs to ensure that certain departme...; Question 527: In order for Sara, a client, to logon to her desktop compute...; Question 528: After Matt, a user, enters his username and password at the ...; Question 529: Which of the following does full disk encryption prevent?...; Question 530: Which of the following authentication methods can use the SC...; Question 531: Each server on a subnet is configured to only allow SSH acce...; Question 532: Purchasing receives a phone call from a vendor asking for a ...; Question 533: Which of the following would be used when a higher level of ...; Question 534: A security manager must remain aware of the security posture...; Question 535: The Chief Information Officer (CIO) receives an anonymous th...; Question 536: A network administrator identifies sensitive files being tra...; Question 537: Which of the following wireless protocols could be vulnerabl...; Question 538: A system administrator wants to confidentially send a user n...; Question 539: Which of the following types of trust models is used by a PK...; Question 540: In PKI, a key pair consists of: (Choose two.)...; Question 541: Which of the following types of authentication solutions use...; Question 542: Recent data loss on financial servers due to security breach...; Question 543: The call center supervisor has reported that many employees ...; Question 544: Which of the following techniques describes the use of appli...; Question 545: Sara, a security manager, has decided to force expiration of...; Question 546: A security administrator examines a network session to a com...; Question 547: Which of the following is MOST critical in protecting contro...; Question 548: Which of the following is the best practice to put at the en...; Question 549: Joe, an administrator, installs a web server on the Internet...; Question 550: A network inventory discovery application requires non-privi...; Question 551: Which of the following would Matt, a security administrator,...; Question 552: A system administrator is using a packet sniffer to troubles...; Question 553: A security administrator wants to implement a solution which...; Question 554: Which of the following must a user implement if they want to...; Question 555: Which of the following would BEST deter an attacker trying t...; Question 556: Which of the following encompasses application patch managem...; Question 557: An organization must implement controls to protect the confi...; Question 558: Which of the following provides the strongest authentication...; Question 559: A small company wants to employ PKI. The company wants a cos...; Question 560: Pete, the system administrator, has concerns regarding users...; Question 561: The Chief Executive Officer (CEO) receives a suspicious voic...; Question 562: Various employees have lost valuable customer data due to ha...; Question 563: Which of the following would be used as a secure substitute ...; Question 564: Which of the following has a storage root key?...; Question 565: Which of the following describes the process of removing unn...; Question 566: A system administrator has made several unauthorized changes...; Question 567: A network administrator uses an RFID card to enter the datac...; Question 568: Sara, a security engineer, is testing encryption ciphers for...; Question 569: Which of the following practices is used to mitigate a known...; Question 570: A cafe provides laptops for Internet access to their custome...; Question 571: Which of the following is a concern when encrypting wireless...; Question 572: A software firm posts patches and updates to a publicly acce...; Question 573: Which of the following implementation steps would be appropr...; Question 574: Which of the following is an authentication and accounting s...; Question 575: Which of the following BEST allows Pete, a security administ...; Question 576: A security administrator needs to determine which system a p...; Question 577: Which of the following would a security administrator implem...; Question 578: The system administrator notices that many employees are usi...; Question 579: Which of the following would prevent a user from installing ...; Question 580: Which of the following BEST explains Platform as a Service?...; Question 581: Which of the following controls would allow a company to red...; Question 582: All executive officers have changed their monitor location s...; Question 583: HOTSPOT For each of the given items, select the appropriate ...; Question 584: Which of the following is used by the recipient of a digital...; Question 585: An administrator is building a development environment and r...; Question 586: Which of the following design components is used to isolate ...; Question 587: Ann is traveling for business and is attempting to use the h...; Question 588: Which of the following BEST describes using a smart card and...; Question 589: Using proximity card readers instead of the traditional key ...; Question 590: Which of the following BEST represents the goal of a vulnera...; Question 591: Pete, a developer, writes an application. Jane, the security...; Question 592: A network engineer is configuring a VPN tunnel connecting a ...; Question 593: A quality assurance analyst is reviewing a new software prod...; Question 594: A system administrator has noticed that users change their p...; Question 595: A system administrator is configuring UNIX accounts to authe...; Question 596: An administrator was asked to review user accounts. Which of...; Question 597: Which of the following are restricted to 64-bit block sizes?...; Question 598: Which of the following should Matt, a security administrator...; Question 599: Which of the following is an authentication service that use...; Question 600: If Organization A trusts Organization B and Organization B t...; Question 601: During a recent investigation, an auditor discovered that an...; Question 602: Matt, a developer, recently attended a workshop on a new app...; Question 603: Jane, an IT security technician, needs to create a way to se...; Question 604: Which of the following attacks allows access to contact list...; Question 605: Joe, a technician, is tasked with finding a way to test oper...; Question 606: A database administrator receives a call on an outside telep...; Question 607: Which of the following file systems is from Microsoft and wa...; Question 608: The system administrator is reviewing the following logs fro...; Question 609: Fuzzing is a security assessment technique that allows teste...; Question 610: Joe, the system administrator, is setting up a wireless netw...; Question 611: Deploying a wildcard certificate is one strategy to:...; Question 612: After an audit, it was discovered that an account was not di...; Question 613: Allowing unauthorized removable devices to connect to comput...; Question 614: A server with the IP address of 10.10.2.4 has been having in...; Question 615: A technician wants to secure communication to the corporate ...; Question 616: Users are encouraged to click on a link in an email to obtai...; Question 617: Which of the following helps to establish an accurate timeli...; Question 618: The Chief Technology Officer (CTO) wants to improve security...; Question 619: Which of the following devices would be the MOST efficient w...; Question 620: Which of the following is an advantage of implementing indiv...; Question 621: Which of the following malware types is MOST likely to execu...; Question 622: An auditing team has found that passwords do not meet the be...; Question 623: Which of the following actions in PKI takes a certificate au...; Question 624: Which of the following passwords is the LEAST complex?...; Question 625: An application developer has tested some of the known exploi...; Question 626: An employee's mobile device associates with the company's gu...; Question 627: Ann works at a small company and she is concerned that there...; Question 628: Which of the following protocols is used to validate whether...; Question 629: Prior to leaving for an extended vacation, Joe uses his mobi...; Question 630: A security analyst discovered data such as images and word d...; Question 631: When using PGP, which of the following should the end user p...; Question 632: Joe, the information security manager, is tasked with calcul...; Question 633: The Chief Information Security Officer (CISO) is concerned t...; Question 634: A security administrator wants to perform routine tests on t...; Question 635: An administrator has concerns regarding the company's server...; Question 636: Which of the following documents outlines the technical and ...; Question 637: After visiting a website, a user receives an email thanking ...; Question 638: When creating a public / private key pair, for which of the ...; Question 639: Which of the following can be implemented if a security admi...; Question 640: A security engineer is asked by the company's development te...; Question 641: To protect corporate data on removable media, a security pol...; Question 642: Which of the following devices is used for the transparent s...; Question 643: Jane, an IT security technician, needs to create a way to se...; Question 644: Which of the following solutions provides the most flexibili...; Question 645: Which of the following should a company implement to BEST mi...; Question 646: A systems engineer has been presented with storage performan...; Question 647: Pete, the security engineer, would like to prevent wireless ...; Question 648: Which of the following controls can be implemented together ...; Question 649: A periodic update that corrects problems in one version of a...; Question 650: Which of the following common access control models is commo...; Question 651: The system administrator wishes to implement a hardware-base...; Question 652: Which of the following can be performed when an element of t...; Question 653: Which of the following application security testing techniqu...; Question 654: A bank has recently deployed mobile tablets to all loan offi...; Question 655: Which of the following authentication services requires the ...; Question 656: One of the most consistently reported software security vuln...; Question 657: A set of standardized system images with a pre-defined set o...; Question 658: An IT security technician needs to establish host based secu...; Question 659: An administrator has to determine host operating systems on ...; Question 660: Which of the following symmetric key algorithms are examples...; Question 661: A technician has implemented a system in which all workstati...; Question 662: The process of making certain that an entity (operating syst...; Question 663: Which of the following is BEST utilized to actively test sec...; Question 664: An administrator discovers that many users have used their s...; Question 665: Which of the following cryptographic algorithms is MOST ofte...; Question 666: Joe, a user, wants to send an encrypted email to Ann. Which ...; Question 667: Pete's corporation has outsourced help desk services to a la...; Question 668: Which of the following documents outlines the responsibility...; Question 669: Which of the following is the MOST intrusive type of testing...; Question 670: Several users report to the administrator that they are havi...; Question 671: Which of the following security architecture elements also h...; Question 672: Jane, a security administrator, needs to implement a secure ...; Question 673: An IT security technician needs to establish host based secu...; Question 674: A network analyst received a number of reports that imperson...; Question 675: A distributed denial of service attack can BEST be described...; Question 676: Ann wants to send a file to Joe using PKI. Which of the foll...; Question 677: Which of the following types of application attacks would be...; Question 678: A security technician is attempting to access a wireless net...; Question 679: Which of the following BEST explains the use of an HSM withi...; Question 680: A security analyst, Ann, is reviewing an IRC channel and not...; Question 681: Which of the following application attacks is used against a...; Question 682: The system administrator has been notified that many users a...; Question 683: A security administrator implements access controls based on...; Question 684: Which of the following is an application security coding pro...; Question 685: If Organization A trusts Organization B and Organization B t...; Question 686: Several employees clicked on a link in a malicious message t...; Question 687: A security technician has been tasked with opening ports on ...; Question 688: Pete, a security auditor, has detected clear text passwords ...; Question 689: A network security engineer notices unusual traffic on the n...; Question 690: An information bank has been established to store contacts, ...; Question 691: An auditor's report discovered several accounts with no acti...; Question 692: A vulnerability assessment indicates that a router can be ac...; Question 693: A company is concerned that a compromised certificate may re...; Question 694: Joe a company's new security specialist is assigned a role t...; Question 695: An incident occurred when an outside attacker was able to ga...; Question 696: After a user performed a war driving attack, the network adm...; Question 697: Ann an employee is visiting Joe, an employee in the Human Re...; Question 698: A security administrator has concerns regarding employees sa...; Question 699: A security Operations Center was scanning a subnet for infec...; Question 700: Which of the following is characterized by an attack against...; Question 701: A new network administrator is setting up a new file server ...; Question 702: Ann, an employee, is cleaning out her desk and disposes of p...; Question 703: Which of the following should Matt, a security administrator...; Question 704: An attacker used an undocumented and unknown application exp...; Question 705: A small company has a website that provides online customer ...; Question 706: Which of the following will allow Pete, a security analyst, ...; Question 707: A new client application developer wants to ensure that the ...; Question 708: Which of the following should an administrator implement to ...; Question 709: Which of the following is where an unauthorized device is fo...; Question 710: Failure to validate the size of a variable before writing it...; Question 711: Which device monitors network traffic in a passive manner?...; Question 712: A user has several random browser windows opening on their c...; Question 713: Which of the following tools will allow a technician to dete...; Question 714: When considering a vendor-specific vulnerability in critical...; Question 715: In which of the following scenarios is PKI LEAST hardened?...; Question 716: Which of the following would a security administrator use to...; Question 717: The database server used by the payroll system crashed at 3 ...; Question 718: Which of the following is an example of multifactor authenti...; Question 719: Which of the following devices will help prevent a laptop fr...; Question 720: Which of the following technical controls helps to prevent S...; Question 721: Which of the following malware types typically allows an att...; Question 722: Based on information leaked to industry websites, business m...; Question 723: The IT department noticed that there was a significant decre...; Question 724: A certificate used on an e-commerce web server is about to e...; Question 725: One of the most basic ways to protect the confidentiality of...; Question 726: Several departments in a corporation have a critical need fo...; Question 727: Several users' computers are no longer responding normally a...; Question 728: A security administrator must implement a secure key exchang...; Question 729: Several bins are located throughout a building for secure di...; Question 730: A company has purchased an application that integrates into ...; Question 731: Which of the following controls should critical application ...; Question 732: A software developer utilizes cryptographic functions to gen...; Question 733: During a server audit, a security administrator does not not...; Question 734: Which of the following technical controls helps to prevent S...; Question 735: Which of the following authentication services uses a ticket...; Question 736: Disabling unnecessary services, restricting administrative a...; Question 737: A technician has implemented a system in which all workstati...; Question 738: Which of the following would a security administrator implem...; Question 739: Which of the following can be used to maintain a higher leve...; Question 740: When confidentiality is the primary concern, and a secure ch...; Question 741: When Ann an employee returns to work and logs into her works...; Question 742: After viewing wireless traffic, an attacker notices the foll...; Question 743: A hacker has discovered a simple way to disrupt business for...; Question 744: A computer supply company is located in a building with thre...; Question 745: Which of the following is a security advantage of using NoSQ...; Question 746: A company is looking to improve their security posture by ad...; Question 747: Which of the following authenticate connections using point-...; Question 748: The Chief Information Officer (CIO) has asked a security ana...; Question 749: Jane, a security administrator, has observed repeated attemp...; Question 750: An internal audit has detected that a number of archived tap...; Question 751: Which of the following attacks would cause all mobile device...; Question 752: Which of the following algorithms has well documented collis...; Question 753: Which of the following protocols provides transport security...; Question 754: Which of the following provides additional encryption streng...; Question 755: A user casually browsing the Internet is redirected to a war...; Question 756: In regard to secure coding practices, why is input validatio...; Question 757: A victim is logged onto a popular home router forum site in ...; Question 758: Which of the following cryptographic related browser setting...; Question 759: A company with a US-based sales force has requested that the...; Question 760: Sara, the Chief Information Officer (CIO), has requested an ...; Question 761: Which of the following BEST describes a protective counterme...; Question 762: Which of the following is a hardware based encryption device...; Question 763: Ann, the security administrator, received a report from the ...; Question 764: Which of the following types of cryptography should be used ...; Question 765: A company's Chief Information Officer realizes the company c...; Question 766: Which of the following is BEST used to capture and analyze n...; Question 767: Ann, a newly hired human resource employee, sent out confide...; Question 768: Which of the following presents the STRONGEST access control...; Question 769: Four weeks ago, a network administrator applied a new IDS an...; Question 770: A trojan was recently discovered on a server. There are now ...; Question 771: Which of the following relies on the use of shared secrets t...; Question 772: Which of the following protocols provides for mutual authent...; Question 773: The BEST methods for a web developer to prevent the website ...; Question 774: Which of the following can be performed when an element of t...; Question 775: A network administrator noticed various chain messages have ...; Question 776: A security administrator notices large amounts of traffic wi...; Question 777: A new application needs to be deployed on a virtual server. ...; Question 778: The act of magnetically erasing all of the data on a disk is...; Question 779: Jane, a security analyst, is reviewing logs from hosts acros...; Question 780: Which of the following application security principles invol...; Question 781: Users at a company report that a popular news website keeps ...; Question 782: A user, Ann, is reporting to the company IT support group th...; Question 783: Which of the following BEST describes the type of attack tha...; Question 784: Which of the following identifies certificates that have bee...; Question 785: At the outside break area, an employee, Ann, asked another e...; Question 786: Which of the following protocols uses TCP instead of UDP and...; Question 787: Which of the following can hide confidential or malicious da...; Question 788: After a recent breach, the security administrator performs a...; Question 789: A recently installed application update caused a vital appli...; Question 790: Which of the following is the best practice for error and ex...; Question 791: Speaking a passphrase into a voice print analyzer is an exam...; Question 792: Joe, a network security engineer, has visibility to network ...; Question 793: An employee connects a wireless access point to the only jac...; Question 794: Full disk encryption is MOST effective against the following...; Question 795: Which of the following types of technologies is used by secu...; Question 796: Which of the following can be used on a smartphone to BEST p...; Question 797: A network administrator is responsible for securing applicat...; Question 798: Ann, the system administrator, is installing an extremely cr...; Question 799: An employee in the accounting department recently received a...; Question 800: A system security analyst wants to capture data flowing in a...

Question 349/800

LEAVE A REPLY

Download PDF File