CtrlAiHub

1.Which of the following is a security advantage of using NoSQL vs. SQL databases in a three-tier environment ?

1.NoSQL databases are not vulnerable to XSRF attacks from the application server
2.NoSQL databases encrypt sensitive information by default.
3.NoSQL databases are not vulnerable to SQL injection attacks.
4.NoSQL databases perform faster than SQL databases on the same hardware

2.A technician has implemented a system in which all workstations on the network will receive security updates on the same schedule. Which of the following concepts does this illustrate ?

1.Application hardening
2.White box testing
3.Black box testing
4.Patch management

3.A system administrator has concerns regarding their users accessing systems and secured areas using others’ credentials. Which of the following can BEST address this concern ?

1.Implement biometric readers on laptops and restricted areas.
2.Create conduct policies prohibiting sharing credentials.
3.Enforce a policy shortening the credential expiration timeframe.
4.Install security cameras in areas containing sensitive systems.

4.Which of the following is the process in which a law enforcement officer or a government agent encourages or induces a person to commit a crime when the potential criminal expresses a desire not to go ahead ?

1.Enticement
2.Deceit
3.Entrapment
4.Sting

5.A user attempting to log on to a workstation for the first time is prompted for the following information before being granted access: username, password, and a four-digit security pin that was mailed to him during account registration. This is an example of which of the following ?

1.Dual-factor authentication
2.Single factor authentication
3.Multifactor authentication
4.Biometric authentication.

6.Peter, the system administrator, has concerns regarding users losing their company provided smartphones. Peter’s focus is on equipment recovery. Which of the following BEST addresses his concerns ?

1.Enable GPS tracking.
2.Enforce device passwords.
3.Use remote sanitation.
4.Encrypt stored data.

7.An incident response team member needs to perform a forensics examination but does not have the required hardware. Which of the following will allow the team member to perform the examination with minimal impact to the potential evidence ?

1.Using a software file recovery disc
2.Imaging based on order of volatility
3.Mounting the drive in read-only mode
4.Hashing the image after capture

8.A user has several random browser windows opening on their computer. Which of the following programs can be installed on his machine to help prevent this from happening ?

1.Pop-up blocker.
2.Antivirus.
3.Spyware blocker.
4.Anti-spam.

9.Which of the following would be a reason for developers to utilize an AES cipher in CCM mode (Counter with Chain Block Message Authentication Code) ?

1.It enables the ability to reverse the encryption with a separate key
2.It allows for one time pad inclusions with the passphrase
3.Counter mode alternates between synchronous and asynchronous encryption
4.It allows a block cipher to function as a steam cipher

10.A company is looking to improve their security posture by addressing risks uncovered by a recent penetration test. Which of the following risks is MOST likely to affect the business on a day-to-day basis ?

1.Insufficient encryption methods.
2.Lack of antivirus software.
3.Corporate espionage.
4.Large scale natural disasters.

11.Which of the following disaster recovery strategies has the highest cost and shortest recovery time ?

1.Warm site
2.Cold site
3.Co-location site
4.Hot site

12.Peter, the systems administrator, is setting up a wireless network for his team’s laptops only and needs to prevent other employees from accessing it. Which of the following would BEST address this ?

1.Implement MAC filtering on the access point.
2.Lower the access point’s power settings.
3.Use WPA instead of WEP encryption.

13.An organization has a need for security control that identifies when an organizational system has been unplugged and a rouge system has been plugged in. The security control must also provide the ability to supply automated notifications. Which of the following would allow the organization to BEST meet this business requirement ?

1.MAC filtering
2.Port security
3.SNMP
4.ACL.

14.At an organization, unauthorized users have been accessing network resources via unused network wall jacks. Which of the following would be used to stop unauthorized access ?

1.Configure an access list.
2.Configure spanning tree protocol.
3.Configure port security.
4.Configure loop protection.

15.Which of the following is a best practice when a mistake is made during a forensics examination ?

1.The examiner should verify the tools before, during, and after an examination.
2.The examiner should document the mistake and workaround the problem.
3.The examiner should attempt to hide the mistake during cross-examination.
4.The examiner should disclose the mistake and assess another area of the disc.