Exam 2: Certified Network Defender

As the CISO, you need to create an IT security strategy. Which of the following is the MOST important thing to review before you start writing the plan?

In terms of supporting a forensic investigation, it is now imperative that managers, firstresponders, etc., accomplish the following actions to the computer under investigation:

How many sectors will a 125 KB file use in a FAT32 file system?

In a forensic examination of hard drives for digital evidence, what type of user is most likely to have the most file slack to analyze?

One way to identify the presence of hidden partitions on a suspect's hard drive is to:

When creating contractual agreements and procurement processes why should security requirements be included?

When choosing a risk mitigation method what is the MOST important factor?

Scenario: A CISO has several two-factor authentication systems under review and selects the one that is most sufficient and least costly. The implementation project planning is completed and the teams are ready to implement the solution. The CISO then discovers that the product it is not as scalable as originally thought and will not fit the organization's needs. The CISO is unsure of the information provided and orders a vendor proof of concept to validate the system's scalability. This demonstrates which of the following?

An example of professional unethical behavior is:

A new CISO just started with a company and on the CISO's desk is the last complete Information Security Management audit report. The audit report is over two years old. After reading it, what should be your first priority?

Which of the following file system is used by Mac OS X?

Which of the following is used to establish and maintain a framework to provide assurance that information security strategies are aligned with organizational objectives?

Which business stakeholder is accountable for the integrity of a new information system?

When updating the security strategic planning document what two items must be included?

Scenario: An organization has recently appointed a CISO. This is a new role in the organization and it signals the increasing need to address security consistently at the enterprise level. This new CISO, while confident with skills and experience, is constantly on the defensive and is unable to advance the IT security centric agenda. Which of the following is the reason the CISO has not been able to advance the security agenda in this organization?

Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN. Recently, members of your organization have been targeted through a number of sophisticated phishing attempts, resulting in compromised credentials. What action can you take to prevent external misuse of compromised credentials while still allowing employees to manage their bank information?

Area density refers to:

Which of the following is a benefit of a risk-based approach to audit planning?

As a CISO you need to understand the steps that are used to perform an attack against a network. Put each step into the correct order. 1.Covering tracks 2.Scanning and enumeration 3.Maintaining Access 4.Reconnaissance 5.Gaining Access

You setup SNMP in multiple offices of your company. Your SNMP software manager is not receiving data from other offices like it is for your main office. You suspect that firewall changes are to blame. What ports should you open for SNMP to work through Firewalls? (Choose two.)