Exam 2: Certified Network Defender

George is a senior security analyst working for a state agency in Florida. His state's congress just passed a bill mandating every state agency to undergo a security audit annually. After learning what will be required, George needs to implement an IDS as soon as possible before the first audit occurs. The state bill requires that an IDS with a "time-based induction machine" be used. What IDS feature must George implement to meet this requirement?

The general ledger setup function in an enterprise resource package allows for setting accounting periods. Access to this function has been permitted to users in finance, the shipping department, and production scheduling. What is the most likely reason for such broad access?

What is the definition of Risk in Information Security?

The BEST organization to provide a comprehensive, independent and certifiable perspective on established security controls in an environment is _______________.

Which of the following items of a computer system will an anti-virus program scan for viruses?

Which of the following is MOST important when dealing with an Information Security Steering committee?

Which of the following illustrates an operational control process:

The police believe that Melvin Matthew has been obtaining unauthorized access to computers belonging to numerous computer software and computer operating systems manufacturers, cellular telephone manufacturers, Internet Service Providers and Educational Institutions. They also suspect that he has been stealing, copying and misappropriating proprietary computer software belonging to the several victim companies. What is preventing the police from breaking down the suspects door and searching his home and seizing all of his computer equipment if they have not yet obtained a warrant?

A company wants to fill a Chief Information Security Officer position in the organization. They need to define and implement a more holistic security program. Which of the following qualifications and experience would be MOST desirable to find in a candidate?

A system is designed to dynamically block offending Internet IP-addresses from requesting services from a secure website. This type of control is considered______________________.

Which is the BEST solution to monitor, measure, and report changes to critical data in a system?

The use of warning banners helps a company avoid litigation by overcoming an employee assumed __________________________. When connecting to the company's intranet, network or Virtual Private Network(VPN) and will allow the company's investigators to monitor, search and retrieve information stored within the network.

An IT auditor has recently discovered that because of a shortage of skilled operations personnel, the security administrator has agreed to work one late night shift a week as the senior computer operator. The most appropriate course of action for the IT auditor is to:

Which of the following represents the BEST method for obtaining business unit acceptance of security controls within an organization?

The process to evaluate the technical and non-technical security controls of an IT system to validate that a given design and implementation meet a specific set of security requirements is called____________________.

What is the main purpose of the Incident Response Team?

The risk found after a control has been fully implemented is called:

In a FAT32 system, a 123 KB file will use how many sectors?

What is meant by password aging?

When investigating a network that uses DHCP to assign IP addresses, where would you look to determine which system (MAC address) had a specific IP address at a specific time?