Question 1

What is another term used for a security weakness?

Accepted Answer

A) threat 
B) vulnerability 
C) risk 
D) opportunity 
A) threat 
B) vulnerability 
C) risk 
D) opportunity

Question 2

Realistically,risks can never be entirely eliminated.

Accepted Answer

A) True 
 B)False

Question 3

Describe the purpose of a honeypot.

Accepted Answer

A honeypot can also direct an attacker's

Question 4

A risk management assessment is a systematic and methodical evaluation of the security posture of the enterprise.

Accepted Answer

A) True 
 B)False

Question 5

Which of the following is a valid data sensitivity labeling and handling category? (Choose all that apply. )

Accepted Answer

A) high-risk 
B) confidential 
C) personal health information 
D) proprietary 
A) high-risk 
B) confidential 
C) personal health information 
D) proprietary

Question 6

What security goal do the following common controls address: Redundancy,fault tolerance,and patching.?

Accepted Answer

A) confidentiality 
B) integrity 
C) availability 
D) safety 
A) confidentiality 
B) integrity 
C) availability 
D) safety

Question 7

Which of the following is used to replicate attacks during a vulnerability assessment by providing a structure of exploits and monitoring tools?

Accepted Answer

A) replication image 
B) assessment image 
C) penetration framework 
D) exploitation framework 
A) replication image 
B) assessment image 
C) penetration framework 
D) exploitation framework

Question 8

List two types of hardening techniques.

Accepted Answer

Protecting accounts with passw

Question 9

What type of scanner sends "probes" to network devices and examine the responses received back to evaluate whether a specific device needs remediation?

Accepted Answer

A) active 
B) non-intrusive 
C) passive 
D) intrusive 
A) active 
B) non-intrusive 
C) passive 
D) intrusive

Question 10

Which scan examines the current security,using a passive method?

Accepted Answer

A) application scan 
B) system scan 
C) threat scan 
D) vulnerability scan 
A) application scan 
B) system scan 
C) threat scan 
D) vulnerability scan

Question 11

The goal of what type of threat evaluation is to better understand who the attackers are,why they attack,and what types of attacks might occur?

Accepted Answer

A) threat mitigation 
B) threat profiling 
C) risk modeling 
D) threat modeling 
A) threat mitigation 
B) threat profiling 
C) risk modeling 
D) threat modeling

Question 12

If a user uses the operating system's "delete" command to erase data,what type of data removal procedure was used?

Accepted Answer

A) wiping 
B) purging 
C) degaussing 
D) data sanitation 
A) wiping 
B) purging 
C) degaussing 
D) data sanitation

Question 13

List and describe the elements that make up a security posture.

Accepted Answer

Initial baseline configuration: A baseli

Question 14

When a security hardware device fails or a program aborts,which state should it go into?

Accepted Answer

A firewall device that went into a fail-

Question 15

Select the vulnerability scan type that will use only the available information to hypothesize the status of the vulnerability.

Accepted Answer

A) active 
B) non-intrusive 
C) passive 
D) intrusive 
A) active 
B) non-intrusive 
C) passive 
D) intrusive

Question 16

What security goal do the following common controls address: hashing,digital signatures,certificates,nonrepudiation tools?

Accepted Answer

A) confidentiality 
B) integrity 
C) availability 
D) safety 
A) confidentiality 
B) integrity 
C) availability 
D) safety

Question 17

List and describe two common uses for a protocol analyzer.

Accepted Answer

Protocol analyzers are widely used by ne

Question 18

Which tester has an in-depth knowledge of the network and systems being tested,including network diagrams,IP addresses,and even the source code of custom applications?

Accepted Answer

A) white box 
B) black box 
C) replay 
D) system 
A) white box 
B) black box 
C) replay 
D) system

Question 19

A port in what state below implies that an application or service assigned to that port is listening for any instructions?

Accepted Answer

A) open port 
B) empty port 
C) closed port 
D) interruptible system 
A) open port 
B) empty port 
C) closed port 
D) interruptible system

Question 20

TCP/IP uses a numeric value as an identifier to the applications and services on these systems.

Accepted Answer

A) True 
 B)False

What is another term used for a security weakness?

Realistically,risks can never be entirely eliminated.

Describe the purpose of a honeypot.

A risk management assessment is a systematic and methodical evaluation of the security posture of the enterprise.

Which of the following is a valid data sensitivity labeling and handling category? (Choose all that apply. )

What security goal do the following common controls address: Redundancy,fault tolerance,and patching.?

Which of the following is used to replicate attacks during a vulnerability assessment by providing a structure of exploits and monitoring tools?

List two types of hardening techniques.

What type of scanner sends "probes" to network devices and examine the responses received back to evaluate whether a specific device needs remediation?

Which scan examines the current security,using a passive method?

The goal of what type of threat evaluation is to better understand who the attackers are,why they attack,and what types of attacks might occur?

If a user uses the operating system's "delete" command to erase data,what type of data removal procedure was used?

List and describe the elements that make up a security posture.

When a security hardware device fails or a program aborts,which state should it go into?

Select the vulnerability scan type that will use only the available information to hypothesize the status of the vulnerability.

What security goal do the following common controls address: hashing,digital signatures,certificates,nonrepudiation tools?

List and describe two common uses for a protocol analyzer.

Which tester has an in-depth knowledge of the network and systems being tested,including network diagrams,IP addresses,and even the source code of custom applications?

A port in what state below implies that an application or service assigned to that port is listening for any instructions?

TCP/IP uses a numeric value as an identifier to the applications and services on these systems.

Introduction to Security

Malware and Social Engineering Attacks

Basic Cryptography

Advanced Cryptography and PKI

Networking and Server Attacks

Network Security Devices, Design, and Technology

Administering a Secure Network

Wireless Network Security

Client and Application Security

Mobile and Embedded Device Security

Authentication and Account Management

Access Management

Business Continuity

Risk Mitigation

Filters

Exam 13: Vulnerability Assessment and Data Security

What is another term used for a security weakness?

Realistically,risks can never be entirely eliminated.

Describe the purpose of a honeypot.

A risk management assessment is a systematic and methodical evaluation of the security posture of the enterprise.

Which of the following is a valid data sensitivity labeling and handling category? (Choose all that apply. )

What security goal do the following common controls address: Redundancy,fault tolerance,and patching.?

Which of the following is used to replicate attacks during a vulnerability assessment by providing a structure of exploits and monitoring tools?

List two types of hardening techniques.

What type of scanner sends "probes" to network devices and examine the responses received back to evaluate whether a specific device needs remediation?

Which scan examines the current security,using a passive method?

The goal of what type of threat evaluation is to better understand who the attackers are,why they attack,and what types of attacks might occur?

If a user uses the operating system's "delete" command to erase data,what type of data removal procedure was used?

List and describe the elements that make up a security posture.

When a security hardware device fails or a program aborts,which state should it go into?

Select the vulnerability scan type that will use only the available information to hypothesize the status of the vulnerability.

What security goal do the following common controls address: hashing,digital signatures,certificates,nonrepudiation tools?

List and describe two common uses for a protocol analyzer.

Which tester has an in-depth knowledge of the network and systems being tested,including network diagrams,IP addresses,and even the source code of custom applications?

A port in what state below implies that an application or service assigned to that port is listening for any instructions?

TCP/IP uses a numeric value as an identifier to the applications and services on these systems.

Introduction to Security

Malware and Social Engineering Attacks

Basic Cryptography

Advanced Cryptography and PKI

Networking and Server Attacks

Network Security Devices, Design, and Technology

Administering a Secure Network

Wireless Network Security

Client and Application Security

Mobile and Embedded Device Security

Authentication and Account Management

Access Management

Business Continuity

Risk Mitigation

Filters