問題1
Which type of scan is used on the eye to measure the layer of blood vessels?
Which type of scan is used on the eye to measure the layer of blood vessels?
正確答案: B
問題2
What is the advantage in encrypting the communication between the agent and the monitor in an Intrusion Detection System?
What is the advantage in encrypting the communication between the agent and the monitor in an Intrusion Detection System?
正確答案: D
問題3
Take a look at the following attack on a Web Server using obstructed URL:
How would you protect from these attacks?
Take a look at the following attack on a Web Server using obstructed URL:
How would you protect from these attacks?
正確答案: D
問題4
What type of cookies can be generated while visiting different web sites on the Internet?
What type of cookies can be generated while visiting different web sites on the Internet?
正確答案: D
說明：（僅 NewDumps 成員可見）
問題5
All the web servers in the DMZ respond to ACK scan on port 80. Why is this happening ?
All the web servers in the DMZ respond to ACK scan on port 80. Why is this happening ?
正確答案: C
說明：（僅 NewDumps 成員可見）
問題6
To what does "message repudiation" refer to what concept in the realm of email security?
To what does "message repudiation" refer to what concept in the realm of email security?
正確答案: D
說明：（僅 NewDumps 成員可見）
問題7
Which of the following type of scanning utilizes automated process of proactively identifying vulnerabilities of the computing systems present on a network?
Which of the following type of scanning utilizes automated process of proactively identifying vulnerabilities of the computing systems present on a network?
正確答案: A
問題8
An attacker finds a web page for a target organization that supplies contact information for the company. Using available details to make the message seem authentic, the attacker drafts e-mail to an employee on the contact page that appears to come from an individual who might reasonably request confidential information, such as a network administrator. The email asks the employee to log into a bogus page that requests the employee's user name and password or click on a link that will download spyware or other malicious programming. Google's Gmail was hacked using this technique and attackers stole source code and sensitive data from Google servers. This is highly sophisticated attack using zero-day exploit vectors, social engineering and malware websites that focused on targeted individuals working for the company. What is this deadly attack called?
An attacker finds a web page for a target organization that supplies contact information for the company. Using available details to make the message seem authentic, the attacker drafts e-mail to an employee on the contact page that appears to come from an individual who might reasonably request confidential information, such as a network administrator. The email asks the employee to log into a bogus page that requests the employee's user name and password or click on a link that will download spyware or other malicious programming. Google's Gmail was hacked using this technique and attackers stole source code and sensitive data from Google servers. This is highly sophisticated attack using zero-day exploit vectors, social engineering and malware websites that focused on targeted individuals working for the company. What is this deadly attack called?
正確答案: C
問題9
How can a policy help improve an employee's security awareness?
How can a policy help improve an employee's security awareness?
正確答案: A
問題10
Neil notices that a single address is generating traffic from its port 500 to port 500 of several other machines on the network. This scan is eating up most of the network bandwidth and Neil is concerned. As a security professional, what would you infer from this scan?
Neil notices that a single address is generating traffic from its port 500 to port 500 of several other machines on the network. This scan is eating up most of the network bandwidth and Neil is concerned. As a security professional, what would you infer from this scan?
正確答案: A
說明：（僅 NewDumps 成員可見）
問題11
The fundamental difference between symmetric and asymmetric key cryptographic systems is that symmetric key cryptography uses which of the following?
The fundamental difference between symmetric and asymmetric key cryptographic systems is that symmetric key cryptography uses which of the following?
正確答案: C
問題12
Which command line switch would be used in NMAP to perform operating system detection?
Which command line switch would be used in NMAP to perform operating system detection?
正確答案: B