Exam 2: Certified Network Defender

SQL injection is a very popular and successful injection attack method. Identify the basic SQL injection text:

One technique for hiding information is to change the file extension from the correct one to one that might not be noticed by an investigator. For example, changing a . jpg extension to a .doc extension so that a picture file appears to be a document. What can an investigator examine to verify that a file has the correct extension?

Acceptable levels of information security risk tolerance in an organization should be determined by?

If a suspect computer is located in an area that may have toxic chemicals, you must:

When operating under severe budget constraints a CISO will have to be creative to maintain a strong security organization. Which example below is the MOST creative way to maintain a strong security posture during these difficult times?

Knowing the potential financial loss an organization is willing to suffer if a system fails is a determination of which of the following?

When analyzing and forecasting a capital expense budget what are not included?

When cataloging digital evidence, the primary goal is to

How often should an environment be monitored for cyber threats, risks, and exposures?

Which of the following represents the BEST reason for an organization to use the Control Objectives for Information and Related Technology (COBIT) as an Information Technology (IT) framework?

An Expert witness give an opinion if:

At what level of governance are individual projects monitored and managed?

The Annualized Loss Expectancy (Before) minus Annualized Loss Expectancy (After) minus Annual Safeguard Cost is the formula for determining:

Your incident response plan should include which of the following?

What header field in the TCP/IP protocol stack involves the hacker exploit known as the Ping of Death?

Melanie was newly assigned to an investigation and asked to make a copy of all the evidence from the compromised system. Melanie did a DOS copy of all the files on the system. What would be the primary reason for you to recommend a disk imaging tool?

Risk that remains after risk mitigation is known as_____________.

You are running through a series of tests on your network to check for any security vulnerabilities. After normal working hours, you initiate a DoS attack against your external firewall. The firewall Quickly freezes up and becomes unusable. You then initiate an FTP connection from an external IP into your internal network. The connection is successful even though you have FTP blocked at the external firewall. What has happened?

You are assisting in the investigation of a possible Web Server Hack. The company who called you stated that customers reported to them that whenever they entered the web address of the company in their browser, what they received was a porno graphic web site. The company checked the web server and nothing appears wrong. When you type in the IP address of the web site in your browser everything appears normal. What is the name of the attack that affects the DNS cache of the name resolution servers, resulting in those servers directing users to the wrong web site?

Which of the following reports should you as an IT auditor use to check on compliance with a Service Level Agreement (SLA) requirement for uptime?