Exam 2: Certified Network Defender

What is the SECOND step to creating a risk management methodology according to the National Institute of Standards and Technology (NIST) SP 800-30 standard?

What are the security risks of running a "repair" installation for Windows XP?

Harold is a security analyst who has just run the rdisk /s command to grab the backup SAM files on a computer. Where should Harold navigate on the computer to find the file?

Which of the following functions evaluates patches used to close software vulnerabilities of new systems to assure compliance with policy when implementing an information security program?

What oversight should the information security team have in the change management process for application security?

Which of the following methodologies references the recommended industry standard that all project managers should follow?

Which of the following is the MOST important component of any change management process?

Which Intrusion Detection System (IDS) usually produces the most false alarms due to the unpredictable behaviors of users and networks?

You are employed directly by an attorney to help investigate an alleged sexual harassment case at a large pharmaceutical manufacture. While at the corporate office of the company, the CEO demands to know the status of the investigation. What prevents you from discussing the case with the CEO?

While designing a secondary data center for your company what document needs to be analyzed to determine to how much should be spent on building the data center?

____________________ is simply the application of Computer Investigation and analysis techniques in the interests of determining potential legal evidence.

Which of the following should a computer forensics lab used for investigations have?

A(n) _____________________ is one that's performed by a computer program rather than the attacker manually performing the steps in the attack sequence.

Information Security is often considered an excessive, after-the-fact cost when a project or initiative is completed. What can be done to ensure that security is addressed cost effectively?

Which of the following activities must be completed BEFORE you can calculate risk?

When a file is deleted by Windows Explorer or through the MS-DOS delete command, the operating system inserts _______________ in the first letter position of the filename in the FAT database.

Which of the following can the company implement in order to avoid this type of security issue in the future?

What is the relationship between information protection and regulatory compliance?

You are assisting a Department of Defense contract company to become compliant with the stringent security policies set by the DoD. One such strict rule is that firewalls must only allow incoming connections that were first initiated by internal computers. What type of firewall must you implement to abide by this policy?

You are trying to locate Microsoft Outlook Web Access Default Portal using Google search on the Internet. What search string will you use to locate them?