QUESTION NO: 1
What does a Synchronous (SYN) flood attack do?
What does a Synchronous (SYN) flood attack do?
Correct Answer: B
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 2
Vulnerability scanners may allow for the administrator to assign which of the following in order to assist in prioritizing remediation activities?
Vulnerability scanners may allow for the administrator to assign which of the following in order to assist in prioritizing remediation activities?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 3
A recent information security risk assessment identified weak system access controls on mobile devices as a high me In order to address this risk and ensure only authorized staff access company information, which of the following should the organization implement?
A recent information security risk assessment identified weak system access controls on mobile devices as a high me In order to address this risk and ensure only authorized staff access company information, which of the following should the organization implement?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 4
Which of the following documents specifies services from the client's viewpoint?
Which of the following documents specifies services from the client's viewpoint?
Correct Answer: B
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 5
To comply with industry requirements, a security assessment on the cloud server should identify which protocols and weaknesses are being exposed to attackers on the Internet. Which of the following tools is the MOST appropriate to complete the assessment?
To comply with industry requirements, a security assessment on the cloud server should identify which protocols and weaknesses are being exposed to attackers on the Internet. Which of the following tools is the MOST appropriate to complete the assessment?
Correct Answer: D
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 6
For the purpose of classification, which of the following is used to divide trust domain and trust boundaries?
For the purpose of classification, which of the following is used to divide trust domain and trust boundaries?
Correct Answer: C
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 7
A client has reviewed a vulnerability assessment report and has stated it is Inaccurate. The client states that the vulnerabilities listed are not valid because the host's Operating System (OS) was not properly detected. Where in the vulnerability assessment process did the erra MOST likely occur?
A client has reviewed a vulnerability assessment report and has stated it is Inaccurate. The client states that the vulnerabilities listed are not valid because the host's Operating System (OS) was not properly detected. Where in the vulnerability assessment process did the erra MOST likely occur?
Correct Answer: C
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 8
Which one of the following is a threat related to the use of web-based client side input validation?
Which one of the following is a threat related to the use of web-based client side input validation?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 9
During which of the following processes is least privilege implemented for a user account?
During which of the following processes is least privilege implemented for a user account?
Correct Answer: C
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 10
When evaluating third-party applications, which of the following is the GREATEST responsibility of Information Security?
When evaluating third-party applications, which of the following is the GREATEST responsibility of Information Security?
Correct Answer: C
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 11
Which of the following is an important design feature for the outer door o f a mantrap?
Which of the following is an important design feature for the outer door o f a mantrap?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 12
In the common criteria, which of the following is a formal document that expresses an implementation-independent set of security requirements?
In the common criteria, which of the following is a formal document that expresses an implementation-independent set of security requirements?
Correct Answer: A
Vote an answer
Explanation: Only visible for Actual4test members. You can sign-up / login (it's free).
QUESTION NO: 13
Drag and Drop Question
Match the level of evaluation to the correct common criteria (CC) assurance level. Drag each level of evaluation on the left to is corresponding CC assurance level on the right.
Drag and Drop Question
Match the level of evaluation to the correct common criteria (CC) assurance level. Drag each level of evaluation on the left to is corresponding CC assurance level on the right.
Correct Answer:
