A company is performing an analysis of the corporate enterprise network with the intent of identifying any one system, person, function, or service that, when neutralized, will cause or cascade disproportionate damage to the company's revenue, referrals, and reputation. Which of the following is an element of the BIA that this action is addressing?

• A.Value assessment
• B.Risk register
• C.Single point of failure
• D.Identication of critical systems

Comment: *

Name: *

Email: *

Verification: *

Which of the following documents would provide specific guidance regarding ports and protocols that should be disabled on an operating system?

• A.Application installation guides
• B.User manuals
• C.Secure configuration guide
• D.Regulatory requirements

Comment: *

Name: *

Email: *

Verification: *

A security administrator is given the security and availability profiles for servers that are being deployed.
* Match each RAID type with the correct configuration and MINIMUM number of drives.
* Review the server profiles and match them with the appropriate RAID type based on integrity, availability, I/O, storage requirements. Instructions:
* All drive definitions can be dragged as many times as necessary
* Not all placeholders may be filled in the RAID configuration boxes
* If parity is required, please select the appropriate number of parity checkboxes
* Server profiles may be dragged only once
If at any time you would like to bring back the initial state of the simulation, please select the Reset button.
When you have completed the simulation, please select the Done button to submit. Once the simulation is submitted, please select the Next button to continue.

Correct Answer:

Explanation

RAID-0 is known as striping. It is not a fault tolerant solution but does improve disk performance for read/write operations. Striping requires a minimum of two disks and does not use parity.
RAID-0 can be used where performance is required over fault tolerance, such as a media streaming server.
RAID-1 is known as mirroring because the same data is written to two disks so that the two disks have identical data. This is a fault tolerant solution that halves the storage space. A minimum of two disks are used in mirroring and does not use parity. RAID-1 can be used where fault tolerance is required over performance, such as on an authentication server. RAID-5 is a fault tolerant solution that uses parity and striping. A minimum of three disks are required for RAID-5 with one disk's worth of space being used for parity information. However, the parity information is distributed across all the disks. RAID-5 can recover from a sing disk failure.
RAID-6 is a fault tolerant solution that uses dual parity and striping. A minimum of four disks are required for RAID-6. Dual parity allows RAID-6 to recover from the simultaneous failure of up to two disks. Critical data should be stored on a RAID-6 system.
http://www.adaptec.com/en-us/solutions/raid_levels.html

Comment: *

Name: *

Email: *

Verification: *

A security analyst is inspecting the results of a recent internal vulnerability scan that was performed against intranet services. The scan reports include the following critical-rated vulnerability:
Title: Remote Command Execution vulnerability in web server Rating: Critical (CVSS 10.0)
Threat actor: any remote user of the web server
Confidence: certain
Recommendation: apply vendor patches
Which of the following actions should the security analyst perform FIRST?

• A.Exploit the server to check whether it is a false positive.
• B.Escalate the issue to senior management.
• C.Organize for urgent out-of-cycle patching.
• D.Apply organizational context to the risk rating.

Comment: *

Name: *

Email: *

Verification: *

A security analyst conducts a manual scan on a known hardened host that identifies many non-compliant
items.
Which of the following BEST describe why this has occurred? (Select TWO)

• A.The output of the report contains false positives
• B.The target host has been compromised
• C.Privileged-user certificated were used to scan the host
• D.The incorrect audit file was used
• E.Non-applicable plugins were selected in the scan policy

Comment: *

Name: *

Email: *

Verification: *