Blog

Which type of attack is generally conducted as an inside attacker with elevated privileges on the resources?

Which of the following attacks an already-authenticated connection?

Which of the following is not a recommended step in recovering from a malware infection?

Brad has done some research and determined a certain set of systems on his network fail once every ten years. The purchase price for each of these systems is $1200. Additionally, Brad discovers the administrators on staff, who earn $50 an hour, estimate five hours to replace a machine. Five employees, earning $25 an hour, depend on each system and will be completely unproductive while it is down. If you were to ask Brad for an ALE on these devices, what should he answer with?

Sally is a member of a pen test team newly hired to test a bank’s security. She begins searching for IP addresses the bank may own by searching public records on the Internet. She also looks up news articles and job postings to discover information that may be valuable. In what phase of the pen test is Sally working?

An IT leader who wants to build IT processes according to a standard model should adopt which standard?

Which resilience technology is appropriate to use where the recovery point objective and recovery time objective are not as time-sensitive?

A new IT leader in an organization wants to introduce quality management into the IT organization. Which is the best standard to use as a reference?

A method where the first personnel involved in a disaster begin notifying others in the organization to inform them of the developing disaster and to enlist their assistance is called a:

Which of the following tools will enable an organization to better understand the integrity of its business processes?