Blog

Your client tells you they know beyond a doubt an attacker is sending messages back and forth from their network, yet the IDS doesnt appear to be alerting on the traffic. Which of the following is most likely true?

Which of the following protects against man-in-the-middle attacks in WPA?

You see the following command in a Linux history fle review: someproc & Which of the following best describe the command result? (Choose two)

Which of the following tests is generally faster and costs less but is susceptible to more false reporting and contract violation?

You are discussing wireless security with your client. She tells you she feels safe with her network as she has implemented MAC filtering on all access points, allowing only MAC addresses from clients she personally configures in each list. You explain this step will not prevent a determined attacker from connecting to this network. Which of the following explains why the APs are still vulnerable?

In the NIST Cloud Computing Reference Architecture, which component acquires and uses cloud products and services?

An attacker inputs the following into the Search text box on box on an entry form:alert (“It Worked”);The attacker then clicks the Search button and a pop-up appears stating, “It Worked.” What can you infer from this?

Which of the following consists of a publicly available set of databases that contain domain name registration contact information?

You are configuring rules for your Snort installation and want to have an alert message of “Attempted FTP” on any FTP packet coming from an outside address intended for one of your internal hosts. Which of the following rules are correct for this situation?

A security staff is preparing for a security audit and wants to know if additional security training for the end user would be beneficial. Which of the following methods would be the best option for testing the effectiveness of user training in the environment?