1. Preventive
2. Corrective
3. Detective
4. Directive

1. Honeypot
2. Darknet
3. Honeynet
4. Pseudoflaw

Ben's organization is adopting biometric authentication for their high-security building's access control system. Using this chart, answer questions 3–5 about their adoption of the technology.

1. The FRR crossover
2. The FAR point
3. The CER
4. The CFR

1. False acceptance will be very high.
2. False rejection will be very high.
3. False rejection will be very low.
4. False acceptance will be very low.

1. Adjust the sensitivity of the biometric devices.
2. Assess other biometric systems to compare them.
3. Move the CER.
4. Adjust the FRR settings in software.

1. PHI
2. PII
3. Personal protected data
4. PID

1. Spiral
2. Agile
3. Boehm
4. Waterfall

1. Bridging
2. Multilayer
3. Hashing
4. Storage

1. Open ID
2. Kerberos
3. OAuth
4. SAML

1. MTD
2. RTO
3. RPO
4. MTO

1. The security of the hardware and firmware
2. Availability of support for the hardware and software
3. Whether the hardware is a legitimate product of the actual vendor
4. The age of the hardware

1. Destruction
2. Erasing
3. Sanitization
4. Clearing

1. White box
2. Blue box
3. Gray box
4. Black box

1. ITIL
2. Lean
3. ITSM
4. DevOps

• Many log sources
• Inconsistent log content
• Inconsistent timestamps
• Inconsistent log formats

Which of the following solutions is best suited to solving these issues?

1. Implement SNMP for all logging devices.
2. Implement a SIEM.
3. Standardize on the Windows event log format for all devices and use NTP.
4. Ensure that logging is enabled on all endpoints using their native logging formats and set their local time correctly.

1. Degaussing
2. Physical destruction
3. Cryptoshredding
4. Reformatting

Collins'&1=1;––

What type of attack took place, and how could it be prevented?

1. SQL injection, use of stored procedures
2. Buffer overflow, automatic buffer expansion
3. Cross-site scripting, turning on XSS prevention on the web server
4. Cross-site request forgery, requiring signed requests

1. Policy
2. Standard
3. Guideline
4. Procedure

1. Secure coding standards
2. Performance testing
3. Baselining
4. Monitoring metrics

1. Digital signature
2. Document staining
3. Hashing
4. Watermarking

1. Basement
2. First floor
3. Second floor
4. Third floor

1. Due care
2. Crime prevention through environmental design
3. Separation of duties
4. Informed consent

1. Civil investigation
2. Criminal investigation
3. Operational investigation
4. Regulatory investigation

1. A cloud PaaS vendor
2. A hosted data center provider
3. A cloud IaaS vendor
4. A data center vendor that provides rack, power, and remote hands services

1. Hot site
2. Warm site
3. Cold site
4. Mobile site

1. Sag
2. Brownout
3. Spike
4. Surge

1. PII
2. Secret
3. Business confidential
4. PHI

1. Link state
2. Shortest path first
3. Link mapping
4. Distance vector

1. Fences
2. Bollards
3. Walls
4. Stairs

For questions 30–34, please refer to the following scenario:

Concho Controls is a midsize business focusing on building automation systems. It hosts a set of local file servers in its on-premises data center that store customer proposals, building plans, product information, and other data that is critical to their business operations.

Tara works in the Concho Controls IT department and is responsible for designing and implementing the organization's backup strategy, among other tasks. She currently conducts full backups every Sunday evening at 8 p.m. and differential backups on Monday through Friday at noon.

Concho experiences a server failure at 3 p.m. on Wednesday. Tara rebuilds the server and wants to restore data from the backups.

1. Sunday's full backup
2. Monday's differential backup
3. Tuesday's differential backup
4. Wednesday's differential backup

1. 1
2. 2
3. 3
4. 4

1. 3 hours.
2. 5 hours.
3. 8 hours.
4. No data will be lost.

1. 1
2. 2
3. 3
4. 4

1. Monday's incremental backup.
2. Tuesday's incremental backup.
3. Wednesday's incremental backup.
4. All three will be the same size.

1. A DNS hijacking attack
2. An ARP spoofing attack
3. A man-in-the-middle attack
4. A SQL injection attack

1. Data remanence
2. Record retention
3. Data redaction
4. Audit logging

1. L2TP
2. Encapsulating Security Payload
3. Encryption Security Header
4. Authentication Header

1. Denial-of-service
2. Reconnaissance
3. Malicious insider
4. Compromise

1. An application log
2. A security log
3. A system log
4. A setup log

1. To minimize business impact of the installation
2. To allow any flaws with the patch to be identified
3. To prevent malware in the patches from being installed before it is identified
4. To allow the patch to be distributed to all systems

1. RAID 0
2. RAID 1
3. RAID 5
4. RAID 10

1. TOCTOU
2. Permissions creep
3. Impersonation
4. Link swap

1. 1
2. 2
3. 3
4. 5

1. Digitally sign and encrypt all messages to ensure integrity.
2. Digitally sign but don't encrypt all messages.
3. Use TLS to protect messages, ensuring their integrity.
4. Use a hashing algorithm to provide a hash in each message to prove that it hasn't changed.

1. ABAC
2. RBAC
3. DAC
4. MAC

1. Zero wipe the drives before the servers leave the organization.
2. Remove the drives and shred them.
3. Reformat the drives before the servers are sent to the e-waste company.
4. Require certificates of disposal from the e-waste company.

1. 50 meters
2. 100 meters
3. 200 meters
4. 300 meters

1. RAID controller
2. Write blocker
3. SCSI terminator
4. Forensic device analyzer

1. Set the Secure attribute for the cookies, thus forcing TLS.
2. Set the Domain cookie attribute to example.com to limit cookie access to servers in the same domain.
3. Set the Expires cookie attribute to less than a week.
4. Set the HTTPOnly attribute to require only unencrypted sessions.

1. Data pooling
2. Failed clearing
3. Data permanence
4. Data remanence

1. DAC
2. MAC
3. Rule-based access control (RBAC)
4. Role-based access control (RBAC)

1. PaaS
2. IDaaS
3. IaaS
4. SaaS

1. Eavesdropping
2. Denial-of-service
3. Blackboxing
4. Caller ID spoofing

1. Separation of duties
2. Two-person control
3. Need to know
4. Least privilege

1. SSH
2. TCP
3. SFTP
4. IPsec

1. UDP; none—TACACS+ encrypts the full session.
2. TCP; none—TACACS+ encrypts the full session.
3. UDP; all but the username and password, which are encrypted.
4. TCP; all but the username and password, which are encrypted.

Use your knowledge of Kerberos authentication and authorization as well as the following diagram to answer questions 57–59.

1. It resends the password
2. A TGR
3. Its TGT
4. A service ticket

1. The KDC verifies the validity of the TGT and whether the user has the right privileges for the requested resource.
2. The KDC updates its access control list based on the data in the TGT.
3. The KDC checks its service listing and prepares an updated TGT based on the service request.
4. The KDC generates a service ticket to issue to the client.

1. The KDC.
2. The client workstation and the KDC.
3. The client workstation supplies it in the form of a client-to-server ticket and an authenticator.
4. The KVS.

1. It serves as the authentication host.
2. It provides proof that the subject is authorized to access an object.
3. It provides proof that a subject has authenticated through a KDC and can request tickets to access other objects.
4. It provides ticket granting services.

1. Identify threats to the business.
2. Identify risks to the organization.
3. Identify business priorities.
4. Conduct likelihood analysis.

1. They can provide attackers with a nonsecured network path into your network.
2. They can be used like rogue access points for man-in-the-middle attacks.
3. They allow wireless data to be intercepted.
4. They are unencrypted and can be easily sniffed.

1. Wet pipe
2. Dry pipe
3. Deluge
4. Preaction

1. Protected health information
2. Personally identifiable information
3. Protected health insurance
4. Individual protected data

1. Mutational fuzzing
2. Manual
3. Generational fuzzing
4. Interface testing

1. Type 1
2. Type 2
3. Type 3
4. Type 4

1. She has to classify the data.
2. She has to make sure that appropriate security controls are in place to protect the data.
3. She has to grant appropriate access to personnel.
4. She bears sole responsibility for ensuring that data is protected at rest, in transit, and in use.

1. Misuse case testing
2. Use case testing
3. Hacker use case testing
4. Static code analysis

1. Stored procedures
2. Escaping all user-supplied input
3. Parameterized queries
4. Input validation

1. 65,536 TCP ports and 32,768 UDP ports
2. 1,024 common TCP ports and 32,768 ephemeral UDP ports
3. 65,536 TCP and 65,536 UDP ports
4. 16,384 TCP ports, and 16,384 UDP ports

1. Vulnerabilities
2. Markup languages
3. Vulnerability assessment tools
4. Penetration testing methodologies

1. An EOL policy
2. A data classification policy
3. An EOS policy
4. A record retention policy

1. Automated recovery
2. Manual recovery
3. Function recovery
4. Automated recovery without undue data loss

1. Antenna placement, antenna type, antenna power levels
2. Antenna design, power levels, use of a captive portal
3. Antenna placement, antenna design, use of a captive portal
4. Power levels, antenna placement, FCC minimum strength requirements

1. Use the built-in erase commands.
2. Use a random pattern wipe of 1s and 0s.
3. Physically destroy the drive.
4. Degauss the drive.

1. Confidentiality
2. Integrity
3. Authentication
4. Nonrepudiation

1. 1 Recon – 2 Deliver – 3 Weaponize – 4 Exploit – 5 Control – 6 Execute – 7 Maintain
2. 1 Recon – 2 Weaponize – 3 Deliver – 4 Exploit – 5 Control – 6 Execute – 7 Maintain
3. 1 Recon – 2 Weaponize – 3 Deliver – 4 Exploit – 5 Execute – 6 Control – 7 Maintain
4. 1 Recon – 2 Weaponize – 3 Exploit – 4 Deliver – 5 Control – 6 Execute – 7 Maintain

1. ISO27001
2. FIPS 140
3. PCI-DSS
4. ISO 27002

1. Out-of-band monitoring
2. Preventing an unpatched laptop from being exploited immediately after connecting to the network
3. Denying access when user behavior doesn't match an authorization matrix
4. Allowing a user access to a specific object when user behavior is allowed based on an authorization matrix

1. Least privilege
2. Implicit deny
3. Explicit deny
4. Final rule fall-through

1. Unpatched web application
2. Web defacement
3. Hacker
4. Operating system

1. An MTO
2. A technical control objective
3. A compliance objective
4. A KPI

1. Statistical sampling.
2. Clipping.
3. Choose the first 5 percent of records from each day.
4. Choose 5 percent of records from the middle of the day.

1. 10Base2
2. 100BaseT
3. 1000BaseT
4. Fiber optic

For questions 85–88, please refer to the following scenario:

Jasper Diamonds is a jewelry manufacturer that markets and sells custom jewelry through its website. Bethany is the manager of Jasper's software development organization, and she is working to bring the company into line with industry-standard practices. She is developing a new change management process for the organization and wants to follow commonly accepted approaches.

1. Configuration control
2. Change control
3. Release control
4. Request control

1. Configuration control
2. Change control
3. Release control
4. Request control

1. Configuration control
2. Change control
3. Release control
4. Request control

1. Configuration control
2. Change control
3. Release control
4. Request control

 hash (password1 + 07C98BFE4CF67B0BFE2643B5B22E2D7D) =
 10B222970537B97919DB36EC757370D2
 hash (password2 + 07C98BFE4CF67B0BFE2643B5B22E2D7D) =
 F1F16683F3E0208131B46D37A79C8921

What flaw has Ben introduced with his hashing implementation?

1. Plaintext salting
2. Salt reuse
3. Use of a short salt
4. Poor salt algorithm selection

1. Building a guard shack
2. Purchasing insurance
3. Erecting fences
4. Relocating facilities

1. RTCP
2. RTVP
3. OCSP
4. CSRTP

1. A CIPS
2. A CASB
3. A CSG
4. A CDLP

1. It works via network connections.
2. It uses a handshake.
3. It monitors for dropped connections.
4. It uses a complex header.

1. Gamification
2. Phishing testing
3. Security champions
4. Social engineering evaluations

1. Likelihood
2. History
3. Impact
4. Cost

1. A data stream
2. A frame
3. A segment
4. A datagram

1. Revocation of certification
2. Termination of employment
3. Financial penalty
4. Suspension of certification

1. The SDLC requires the use of an iterative approach to software development.
2. The SDLC requires the use of a sequential approach to software development.
3. The SDLC does not include training for end users and support staff.
4. The waterfall methodology is compatible with the SDLC.

1. Bell–LaPadula
2. Biba
3. Clark–Wilson
4. Brewer–Nash

1. 802.11
2. NAC
3. A captive portal
4. A wireless gateway

1. When they are booted up and running because the system monitors for drive access
2. When the system is shutting down because keys are removed from memory
3. When they are booting up because the TPM checks for a secure boot process
4. When they are off because the drive is fully encrypted

1. TLS
2. BGP
3. IPsec
4. AES

For questions 103–105, please refer to the following scenario:

The company that Fred works for is reviewing the security of their company-issued cell phones. They issue 4G-capable smartphones running Android and iOS and use a mobile device management solution to deploy company software to the phones. The mobile device management software also allows the company to remotely wipe the phones if they are lost.

1. They should use the same requirements as data over any public network.
2. Cellular provider networks are private networks and should not require special consideration.
3. Encrypt all traffic to ensure confidentiality.
4. Require the use of WAP for all data sent from the phone.

1. Continue normal usage.
2. Discontinue all usage; towers can be spoofed.
3. Only use trusted WiFi networks.
4. Connect to his company's encrypted VPN service.

1. The phone has a passcode on it.
2. The phone cannot contact a network.
3. The provider has not unlocked the phone.
4. The phone is in use.

1. AV
2. SSL
3. RTO
4. MTO

1. ITSM
2. ATT&CK
3. COBIT
4. CIS

1. Checklist review
2. Parallel test
3. Tabletop exercise
4. Full interruption test

1. 1, 2, 3, 4
2. 1, 3, 2, 4
3. 1, 3, 4, 2
4. 2, 1, 3, 4

1. Confidentiality
2. Integrity
3. Availability
4. None of the above

1. Forensics
2. Retribution
3. Recovery
4. Analysis

1. Validation should always be performed on the client side.
2. Attackers may use XSS filter evasion techniques against this approach.
3. Server-side validation requires removing all HTML tags, not just the <SCRIPT> tag.
4. There is no problem with Frank's approach.

1. An SLA
2. An RPA
3. An NDA
4. An MOU

1. NDA
2. NCA
3. BAA
4. SLA

1. Full interruption test
2. Parallel test
3. Tabletop exercise
4. Checklist review

1. A switch
2. A router
3. A bridge
4. A gateway

1. The lack of local storage space for security logs that is common to IoT devices.
2. The IoT devices may not have a separate administrative interface, allowing anybody on the same network to attempt to log into them and making brute-force attacks possible.
3. The IoT devices may not support strong encryption for communications, exposing the log and sensor data to interception on the network.
4. The long-term support and patching model for the IoT devices may create security and operational risk for the organization.

1. ICMP
2. TCP
3. UDP
4. SNMP

1. Organizations must allow individuals to opt out of information sharing.
2. Organizations must provide individuals with lists of employees with access to information.
3. Organizations must use proper mechanisms to protect data against unauthorized disclosure.
4. Organizations must have a dispute resolution process for privacy issues.

1. Hot site
2. Warm site
3. Cold site
4. Red site

1. Session
2. Transport
3. Network
4. Data Link

1. 128 bits
2. 192 bits
3. 256 bits
4. 384 bits

1. Data dictionary
2. Object model
3. Source code
4. API

1. Run a vulnerability scan against the provider's external services.
2. Request a SOC 2 Type II report.
3. Run a vulnerability scan against the provider's internal systems.
4. Request a SOC 1 Type II report.

The letters rwx indicate different levels of what?

1. Identification
2. Authorization
3. Authentication
4. Accountability

Protocol

1. TCP
2. UDP
3. DNS
4. ARP

Description

1. Performs translations between MAC addresses and IP addresses
2. Performs translations between FQDNs and IP addresses
3. Transports data over a network in a connection-oriented fashion
4. Transports data over a network in a connectionless fashion