A penetration tester finds an unused Ethernet port during an on-site penetration test. Upon plugging a device into the unused port, the penetration tester notices that the machine is assigned an IP address, allowing the tester to enumerate the local network. Which of the following should an administrator implement in order to prevent this situation from happening in the future?

• A.Transport Layer Security
• B.Security zones
• C.Port security
• D.Proxy server

Comment: *

Name: *

Email: *

Verification: *

An employee used a company's billing system to issue fraudulent checks. The administrator is looking for evidence of other occurrences of this activity. Which of the following should the administrator examine?

• A.Application logs
• B.Vulnerability scanner logs
• C.IDS/IPS logs
• D.Firewall logs

Comment: *

Name: *

Email: *

Verification: *

An organization authorizes system deployment on the network after reducing the number of Category 1 vulnerabilities to zero. Which of the following is this scenario an example of?

• A.Risk avoidance
• B.Risk tolerance
• C.Risk transference
• D.Risk reporting

Comment: *

Name: *

Email: *

Verification: *

A database administrator is updating the company's SQL database, which stores credit card information for pending purchases. Which of the following is the best method to secure the data against a potential breach?

• A.Hashing
• B.Obfuscation
• C.Tokenization
• D.Masking

Comment: *

Name: *

Email: *

Verification: *

Which of the following describes the main purpose of a risk register?

• A.To track, assess, and manage identified threats
• B.To automatically mitigate all security vulnerabilities
• C.To replace the need for external penetration testing
• D.To automatically create compliance reports

Comment: *

Name: *

Email: *

Verification: *