Exam 2: Certified Network Defender

This organization maintains a database of hash signatures for known software.

A business unit within your organization intends to deploy a new technology in a manner that places it in violation of existing information security standards. What immediate action should the information security manager take?

When setting up a wireless network with multiple access points, why is it important to set each access point on a different channel?

Jessica works as systems administrator for a large electronics firm. She wants to scan her network quickly to detect live hosts by using ICMP ECHO Requests. What type of scan is Jessica going to perform?

A state department site was recently attacked and all the servers had their disks erased. The incident response team sealed the area and commenced investigation. During evidence collection they came across a zip disks that did not have the standard labeling on it. The incident team ran the disk on an isolated system and found that the system disk was accidentally erased. They decided to call in the FBI for further investigation. Meanwhile, they short listed possible suspects including three summer interns. Where did the incident team go wrong?

You are called in to assist the police in an investigation involving a suspected drug dealer. The suspects house was searched by the police after a warrant was obtained and they located a floppy disk in the suspects bedroom. The disk contains several files, but they appear to be password protected. What are two common methods used by password cracking software that you can use to obtain the password?

The rule of thumb when shutting down a system is to pull the power plug. However, it has certain drawbacks. Which of the following would that be?

A system was hardened at the Operating System level and placed into the production environment. Months later an audit was performed and it identified insecure configuration different from the original hardened state. Which of the following security issues is the MOST likely reason leading to the audit findings?

In accordance with best practices and international standards, how often is security awareness training provided to employees of an organization?

The implementation of anti-malware and anti-phishing controls on centralized email servers is an example of what type of security control?

Which of the following is the MOST important benefit of an effective security governance process?

Before you are called to testify as an expert, what must an attorney do first?

In Linux, what is the smallest possible shellcode?

Jason is the security administrator of ACMA metal Corporation. One day he notices the company's Oracle database server has been compromised and the customer information along with financial data has been stolen. The financial loss will be in millions of dollars if the database gets into the hands of the competitors. Jason wants to report this crime to the law enforcement agencies immediately. Which organization coordinates computer crimes investigations throughout the United States?

As the CISO you need to write the IT security strategic plan. Which of the following is the MOST important to review before you start writing the plan?

When managing the critical path of an IT security project, which of the following is MOST important?

This occurs when the quantity or quality of project deliverables is expanded from the original project plan.

Which of the following tests is an IS auditor performing when a sample of programs is selected to determine if the source and object versions are the same?

When dealing with a risk management process, asset classification is important because it will impact the overall:

An organization information security policy serves to___________________.