Exam 2: Certified Network Defender

Paul's company is in the process of undergoing a complete security audit including logical and physical security testing. After all logical tests were performed; it is now time for the physical round to begin. None of the employees are made aware of this round of testing. The security-auditing firm sends in a technician dressed as an electrician. He waits outside in the lobby for some employees to get to work and follows behind them when they access the restricted areas. After entering the main office, he is able to get into the server room telling the IT manager that there is a problem with the outlets in that room. What type of attack has the technician performed?

When you are running a vulnerability scan on a network and the IDS cuts off your connection, what type of IDS is being used?

You are working in the security Department of law firm. One of the attorneys asks you about the topic of sending fake email because he has a client who has been charged with doing just that. His client alleges that he is innocent and that there is no way for a fake email to actually be sent. You inform the attorney that his client is mistaken and that fake email is possibility and that you can prove it. You return to your desk and craft a fake email to the attorney that appears to come from his boss. What port do you send the email to on the company SMTP server?

Which of the following intellectual Property components is focused on maintaining brand recognition?

When reviewing web logs, you see an entry for resource not found in the HTTP status code filed. What is the actual error code that you would see in the log for resource not found?

Which of the following is MOST useful when developing a business case for security initiatives?

You are using DriveSpy, a forensic tool and want to copy 150 sectors where the starting sector is 1709 on the primary hard drive. Which of the following formats correctly specifies these sectors?

What are the primary reasons for the development of a business case for a security project?

How often should the SSAE16 report of your vendors be reviewed?

After a risk assessment is performed, a particular risk is considered to have the potential of costing the organization 1.2 Million USD. This is an example of____________.

The success of the Chief Information Security Officer is MOST dependent upon:

Which of the following will be MOST helpful for getting an Information Security project that is behind schedule back on schedule?

Bill is the accounting manager for Grummon and Sons LLC in Chicago. On a regular basis, he needs to send PDF documents containing sensitive information through E-mail to his customers. Bill protects the PDF documents with a password and sends them to their intended recipients. Why PDF passwords do not offer maximum protection?

The framework that helps to define a minimum standard of protection that business stakeholders must attempt to achieve is referred to as a standard of:

If you discover a criminal act while investigating a corporate policy abuse, it becomes a publicsector investigation and should be referred to law enforcement?

The offset in a hexadecimal code is:

Which type of physical security control scan a person's external features through a digital video camera before granting access to a restricted area?

When investigating a Windows System, it is important to view the contents of the page or swap file because:

Dataflow diagrams are used by IT auditors to:

When analyzing and forecasting an operating expense budget what are not included?