Question 1

Which of the following is MOST effective in detecting information hiding in Transmission Control Protocol/Internet Protocol (TCP/IP) traffic?

Accepted Answer

A)  Packet-filter firewall 
B)  Content-filtering web proxy 
C)  Stateful inspection firewall 
D)  Application-level firewall

Question 2

Which of the following is the BEST network defense against unknown types of attacks or stealth attacks in progress?

Accepted Answer

A)  Intrusion Prevention Systems (IPS) 
B)  Intrusion Detection Systems (IDS) 
C)  Stateful firewalls 
D)  Network Behavior Analysis (NB
A)  tools

Question 3

What is the purpose of code signing?

Accepted Answer

A)  The signer verifies that the software being loaded is the software originated by the signer 
B)  The vendor certifies the software being loaded is free of malicious code and that it was originated by the signer 
C)  The signer verifies that the software being loaded is free of malicious code 
D)  Both vendor and the signer certify the software being loaded is free of malicious code and it was originated by the signer

Question 4

How does security in a distributed file system using mutual authentication differ from file security in a multi-user host?

Accepted Answer

A)  Access control can rely on the Operating System (OS), but eavesdropping is not a risk 
B)  Access control cannot rely on the Operating System (OS), and eavesdropping is a risk 
C)  Access control can rely on the Operating System (OS), and eavesdropping is a risk 
D)  Access control cannot rely on the Operating System (OS), and eavesdropping is not a risk

Question 5

A security team member was selected as a member of a Change Control Board (CCB) for an organization. Which of the following is one of their responsibilities?

Accepted Answer

A)  Approving or disapproving the change 
B)  Determining the impact of the change 
C)  Carrying out the requested change 
D)  Logging the change

Question 6

An Information Technology (IT) professional attends a cybersecurity seminar on current incident response methodologies. What code of ethics canon is being observed?

Accepted Answer

A)  Provide diligent and competent service to principals 
B)  Protect society, the commonwealth, and the infrastructure 
C)  Advance and protect the profession 
D)  Act honorable, honesty, justly, responsibly, and legally

Question 7

Which of the following is the BEST way to protect against Structured Query Language (SQL) injection?

Accepted Answer

A)  Enforce boundary checking 
B)  Restrict use of SELECT command 
C)  Restrict HyperText Markup Language (HTML) source code access 
D)  Use stored procedures

Question 8

An Intrusion Detection System (IDS) has recently been deployed in a Demilitarized Zone (DMZ). The IDS detects a flood of malformed packets. Which of the following BEST describes what has occurred?

Accepted Answer

A)  Denial of Service (DoS) attack 
B)  Address Resolution Protocol (ARP) spoof 
C)  Buffer overflow 
D)  Ping flood attack

Question 9

A security consultant has been hired by a company to establish its vulnerability management program. The consultant is now in the deployment phase. Which of the following tasks is part of this process?

Accepted Answer

A)  Select and procure supporting technologies. 
B)  Determine a budget and cost analysis for the program. 
C)  Measure effectiveness of the program's stated goals. 
D)  Educate and train key stakeholders.

Question 10

Which of the following phases involves researching a target's configuration from public sources when performing a penetration test?

Accepted Answer

A)  Information gathering 
B)  Social engineering 
C)  Target selection 
D)  Traffic enumeration

Question 11

Point-to-Point Protocol (PPP) was designed to specifically address what issue?

Accepted Answer

A)  A common design flaw in telephone modems 
B)  Speed and reliability issues between dial-up users and Internet Service Providers (ISP) 
C)  Compatibility issues with personal computers and web browsers 
D)  The security of dial-up connections to remote networks

Question 12

What should an auditor do when conducting a periodic audit on media retention?

Accepted Answer

A)  Check electronic storage media to ensure records are not retained past their destruction date 
B)  Ensure authorized personnel are in possession of paper copies containing Personally Identifiable Information (PII) 
C)  Check that hard disks containing backup data that are still within a retention cycle are being destroyed correctly 
D)  Ensure that data shared with outside organizations is no longer on a retention schedule

Question 13

What is the BEST location in a network to place Virtual Private Network (VPN) devices when an internal review reveals network design flaws in remote access?

Accepted Answer

A)  In a dedicated Demilitarized Zone (DMZ) 
B)  At the Internet Service Provider (ISP) 
C)  In its own separate Virtual Local Area Network (VLAN) 
D)  Outside the external firewall

Question 14

Which of the following is the MOST important output from a mobile application threat modeling exercise according to Open Web Application Security Project (OWASP)?

Accepted Answer

A)  The likelihood and impact of a vulnerability 
B)  Application interface entry and endpoints 
C)  Countermeasures and mitigations for vulnerabilities 
D)  A data flow diagram for the application and attack surface analysis

Question 15

Which Redundant Array of Independent Disks (RAID) Level does the following diagram represent?

Accepted Answer

A)  RAID 0 
B)  RAID 1 
C)  RAID 5 
D)  RAID 10

Question 16

Which one of the following data integrity models assumes a lattice of integrity levels?

Accepted Answer

A)  Take-Grant 
B)  Biba 
C)  Harrison-Ruzzo 
D)  Bell-LaPadula

Question 17

Asymmetric algorithms are used for which of the following when using Secure Sockets Layer/Transport Layer Security (SSL/TLS) for implementing network security?

Accepted Answer

A)  Peer authentication 
B)  Payload data encryption 
C)  Session encryption 
D)  Hashing digest

Question 18

How does Encapsulating Security Payload (ESP) in transport mode affect in the Internet Protocol (IP)?

Accepted Answer

A)  Authenticates the IP payload and selected portions of the IP header 
B)  Encrypts and optionally authenticates the complete IP packet 
C)  Encrypts and optionally authenticates the IP header, but not the IP payload 
D)  Encrypts and optionally authenticates the IP payload, but not the IP header

Question 19

What does the term "100-year floodplain" mean to emergency preparedness officials?

Accepted Answer

A)  The odds of a flood at this level are 1 in 100 in any given year 
B)  The area is expected to be safe from flooding for at least 100 years 
C)  The last flood of any kind to hit the area was more than 100 years ago 
D)  The odds are that the next significant flood will hit within the next 100 years

Question 20

Which of the following is used to support the concept of defense in depth during the development phase of a software product?

Accepted Answer

A)  Maintenance hooks 
B)  Polyinstantiation 
C)  Known vulnerability list 
D)  Security auditing

Exam 3: Certified Information Systems Security Professional