Acme Corporation is doing a core evaluation of its centralized logging capabilities. Which of the following scenarios indicates a failure in more than one CIS Control?

• A.The loghost is missing logs from 3 servers in the inventory
• B.The loghost is receiving logs from hosts with different timezone values
• C.The loghost is receiving out-of-sync logs from undocumented servers
• D.The loghost time is out-of-sync with an external host

Comment: *

Name: *

Email: *

Verification: *

An attacker is able to successfully access a web application as root using ' or 1 = 1 . as the password. The successful access indicates a failure of what process?

• A.URL Encoding
• B.Output Sanitization
• C.Account Management
• D.Input Validation

Comment: *

Name: *

Email: *

Verification: *

Of the options shown below, what is the first step in protecting network devices?

• A.Implementing IDS to detect attacks
• B.Scanning the devices for known vulnerabilities
• C.Creating standard secure configurations for all devices
• D.Applying all known security patches

Comment: *

Name: *

Email: *

Verification: *

What could a security team use the command line tool Nmap for when implementing the Inventory and Control of Hardware Assets Control?

• A.Passively identify new devices
• B.Inventory offline databases
• C.Actively identify new servers
• D.Control which devices can connect to the network

Comment: *

Name: *

Email: *

Verification: *

What is an organization's goal in deploying a policy to encrypt all mobile devices?

• A.Controlling unauthorized access to sensitive information
• B.Applying the principle of defense in depth to their mobile devices
• C.Enabling best practices for the protection of their software licenses
• D.Providing their employees, a secure method of connecting to the corporate network

Comment: *

Name: *

Email: *

Verification: *