Correct Answer:

Port scanner is correct. A specific address is attempting to connect to each TCP port in succession. This indicates the tool is scanning all ports on the system to find open ports that can be exploited.

Incorrect Answers:

Vulnerability scanner is incorrect. A vulnerability scanner looks for vulnerabilities within the OS and software and would not attempt to connect to each TCP port in succession.

IP scanner is incorrect. An IP scanner scans an entire IP range and reports back active devices, which would not involve attempting to connect to each TCP port in succession.

ifconfig is incorrect. ifconfig is used to view the current configuration of IP interfaces and would not attempt to connect to each TCP port in succession.

Correct Answer:

Authentication is correct. Encrypted digital certificates are used to identify users electronically on a network and satisfy the information assurance objective of authentication.

Incorrect Answers:

Nonrepudiation is incorrect. Nonrepudiation refers to a user not being able to repudiate a signed transaction.

Integrity is incorrect. Hashing is used for checking the integrity of a message.

Confidentiality is incorrect. The confidentiality and privacy of data are satisfied by using encryption.

Correct Answer:

Load balancer is correct. A load balancer can process all incoming web requests and redirect the requests to one of the four web servers either based on how much current processing load each web server is utilizing or by using round-robin methods.

Incorrect Answers:

NAT-aware firewall is incorrect. A network address translation (NAT)-aware firewall is only able to allow sharing of external IP addresses by internal devices.

Network analyzer is incorrect. A network analyzer only inspects network packets; it does not process them or redirect them.

Additional routers and switches is incorrect. Additional routers and switches will increase bandwidth potential but not effectively share the processing load between the web servers.

Correct Answer:

Link-level security is correct. Link-level security authenticates the actual communications link before data transmission begins. Data encryption can also be performed in this mode after the link is authenticated.

Incorrect Answers:

Call-back security is incorrect. Bluetooth does not operate on the cell phone network.

Smartphone lock password is incorrect. A password on the phone itself does not authenticate wireless Bluetooth connections.

Bluejacking is incorrect. Bluejacking is a type of attack where an unauthorized user can send unwanted messages to another Bluetooth device.

Correct Answer:

Make a copy of the firewall logs and error messages is correct. To preserve forensic evidence of the attack, you should make a copy of the firewall’s log files before performing any other action that could destroy the evidence.

Incorrect Answers:

Reboot the device to restore normal operation and reinstall the operating system are incorrect. Either rebooting the firewall or reinstalling the operating system could erase any error messages or log files you may require as forensic evidence.

Escalate the issue to your manager is incorrect. Although escalating the issue to your manager is important, as the first responder, your primary goal is to perform damage control and collect evidence.

Correct Answer:

Five failed login attempts for the admin user at 3:30 AM is correct. It is suspicious behavior if someone is unsuccessfully trying to log in to the admin account during off-work hours.

Incorrect Answers:

All other choices are incorrect. These log items do not indicate activity that is abnormal for most companies.

Correct Answer:

Separation of duties is correct. A separation of duties policy ensures that one single individual isn’t tasked with high-security and high-risk responsibilities. Critical responsibilities are separated between several users to prevent corruption and errors.

Incorrect Answers:

Mandatory vacation is incorrect. A mandatory vacation policy is used to detect security issues when the employee is absent.

Least privilege is incorrect. A least privilege policy ensures that users only have the access rights they need to perform their job functions.

Job rotation is incorrect. A job rotation policy ensures that no employee retains the same amount of access control for a responsibility for more than a given period.

Correct Answer:

Install a host-based firewall is correct. The host-based firewall software can be used to protect a user’s confidential local data against many types of possible attacks for both incoming and outgoing connections on both wireless and wired networks when the user is away from the office.

Incorrect Answers:

Enable encryption when working in the office is incorrect. Encrypting wireless data when in the office will not protect users from attacks when they are at home or traveling.

Set the clients to use only the 802.11n standard is incorrect. The clients will be insecure no matter which wireless standard they are using.

Use wireless client authentication is incorrect. Authentication only ensures that the specific user is authorized to use the wireless network; it does not protect the user from network attacks.

Correct Answer:

LDAPS is correct. You can configure a Lightweight Directory Access Protocol (LDAP) server to use Transport Layer Security (TLS) or Secure Sockets Layer (SSL), also known as LDAPS, to encrypt authentication communications. This ensures that client credentials, such as usernames and passwords, are not sent in cleartext over the network.

Incorrect Answers:

Local username and password, LDAP, and PAP are incorrect. These methods do not use secure encrypted channels.

Correct Answer:

Minimum password length and complexity is correct. By enforcing a minimum length and complexity level of passwords, you ensure that users can’t use weak passwords that are too short or consist of dictionary words.

Incorrect Answers:

Usernames not related to company roles and account expiration are incorrect. User account names and account expiry dates have no bearing on passwords.

Minimizing use of special characters is incorrect. It is beneficial to use special characters in passwords to increase the complexity.