Exam 2: Certified Network Defender

What should an organization do to ensure that they have a sound Business Continuity (BC) Plan?

What is a difference from the list below between quantitative and qualitative Risk Assessment?

When selecting a security solution with reoccurring maintenance costs after the first year

When examining a hard disk without a write-blocker, you should not start windows because Windows will write data to the:

Which of the following represents the HIGHEST negative impact resulting from an ineffective security governance program?

Which of the following is the MAIN reason to follow a formal risk management process in an organization that hosts and uses privately identifiable information (PII) as part of their business models and processes?

Which International Organization for Standardization (ISO) below BEST describes the performance of risk management, and includes a five-stage risk management methodology.

Corporate investigations are typically easier than public investigations because:

Payment Card Industry (PCI) compliance requirements are based on what criteria?

Which of the following is the MOST important component of any change management process?

Which response organization tracks hoaxes as well as viruses?

What term is used to describe a cryptographic technique for embedding information into something else for the sole purpose of hiding that information from the casual observer?

Michael works for Kimball Construction Company as senior security analyst. As part of yearly security audit, Michael scans his network for vulnerabilities. Using Nmap, Michael conducts XMAS scan and most of the ports scanned do not give a response. In what state are these ports?

Scenario: Your company has many encrypted telecommunications links for their world-wide operations. Physically distributing symmetric keys to all locations has proven to be administratively burdensome, but symmetric keys are preferred to other alternatives. Symmetric encryption in general is preferable to asymmetric encryption when:

Scenario: Your organization employs single sign-on (user name and password only) as a convenience to your employees to access organizational systems and data. Permission to individual systems and databases is vetted and approved through supervisors and data owners to ensure that only approved personnel can use particular applications or retrieve information. All employees have access to their own human resource information, including the ability to change their bank routing and account information and other personal details through the Employee Self-Service application. All employees have access to the organizational VPN. The organization wants a more permanent solution to the threat to user credential compromise through phishing. What technical solution would BEST address this issue?

You are working as Computer Forensics investigator and are called by the owner of an accounting firm to investigate possible computer abuse by one of the firm's employees. You meet with the owner of the firm and discover that the company has never published a policy stating that they reserve the right to inspect their computing assets at will. What do you do?

When should IT security project management be outsourced?

With Regard to using an Antivirus scanner during a computer forensics investigation, You should:

You are having a penetration test done on your company network and the leader of the team says they discovered all the network devices because no one had changed the Simple Network Management Protocol (SNMP) community strings from the defaults. Which of the following is a default community string?

Creating a secondary authentication process for network access would be an example of?