Correct Answer:

Using strong passwords is correct. You should ensure that all your network devices use very strong passwords to prevent basic hacking attempts on the administrator account.

Incorrect Answers:

Using audit logging is incorrect. Audit logging will not prevent unauthorized access to the router.

Using HTTPS remote access is incorrect. Hackers can also use Hypertext Transfer Protocol over SSL/TLS (HTTPS) to connect to the router and guess a weak password.

Backing up the router configuration is incorrect. Although having a backup of the configuration is important for recovering from an attack, it will not prevent hacking attempts on the router.

Correct Answer:

Use MDM to conduct a remote wipe is correct. If the phone has the capability, you can use Mobile Device Management (MDM) to remotely wipe the phone to erase all its contents. The smartphone itself might never be recovered, but you have removed any critical and confidential data from the phone.

Incorrect Answers:

Rely on the screen lock password is incorrect. A hacker may be able to bypass or guess the password on the phone and still read its contents.

Disable the smartphone SIM is incorrect. Disabling the smartphone SIM will only prevent the unauthorized user from making calls with the phone.

Call the smartphone number is incorrect. Calling the phone to find out its location will not provide any protection for its data.

Correct Answer:

Error and exception handling is correct. Your application needs to handle errors and exceptions without providing escalated privileges or revealing the internal details of the system or application. An error should not cause the program to halt or crash to an insecure state.

Incorrect Answers:

Fuzzing is incorrect. Fuzzing is used to test input validation.

Cross-site scripting is incorrect. Cross-site scripting (XSS) is a type of application attack.

Input validation is incorrect. Input validation checks that the input into a form meets requirements and does not allow XSS or other attacks from a malicious input.

Correct Answer:

Heat is correct. Heat is not generally a factor within an embedded and specialized system.

Incorrect Answers:

Power, compute, and cryptography are incorrect. These are common constraints within an embedded or specialized system.

Correct Answer:

Certificate authority is correct. A certificate authority (CA) is an organization or entity that issues and manages digital certificates. The CA is responsible for authenticating and identifying users before issuing a certificate.

Incorrect Answers:

Authentication authority, certificate policy management system, and authorization server are incorrect. There is no authentication authority, certificate policy management system, or authorization server within a Public Key Infrastructure (PKI) architecture.

Correct Answer:

UDP port 53 is correct. Domain Name System (DNS) queries use UDP port 53. DNS also uses TCP port 53 for zone transfers. If this is blocked on your firewall, you will not be able query a DNS server for a hostname lookup.

Incorrect Answers:

TCP ports 137, 138, and 139 is incorrect. TCP ports 137, 138, and 139 are used by Network Basic Input/Output System (NetBIOS).

UDP port 161 is incorrect. UDP port 161 is used by the Simple Network Management Protocol (SNMP).

TCP ports 20 and 21 is incorrect. TCP ports 20 and 21 are used by the File Transfer Protocol (FTP).

Correct Answer:

Create a system baseline is correct. To properly measure system performance, you need to create a system baseline that shows the normal operating performance levels. Then you will be able to measure future performance data against the baseline to reveal performance anomalies.

Incorrect Answers:

Scan the system for malware, make sure all system software patches are up to date, and disable nightly backups are incorrect. None of these actions will provide any current performance data to measure against.

Correct Answer:

Cloud computing is correct. Using a cloud-based service, the salespeople can perform their work using a web browser that connects to the cloud service, giving them instant access to the application and the data without having to keep the only copy of the data on their laptop.

Incorrect Answers:

NAC is incorrect. Network access control (NAC) is a security concept and does not provide the required services.

Virtualization is incorrect. Virtualization allows several virtual computers to run on the same hardware.

Subnetting is incorrect. Subnetting is a networking concept that subdivides logical networks; it does not provide the required service.

Correct Answer:

Vulnerability scanning is correct. A vulnerability scanner is a software program specifically designed to scan a system via the network to determine what services the system is running and whether there are any unnecessary open network ports, unpatched operating systems, or unpatched applications.

Incorrect Answers:

Fuzzing is incorrect. Fuzzing is a technique used to test input validation.

Malware scanning is incorrect. Malware would be installed as a third-party application after the software is released and would not be detected after the initial development stage.

Penetration testing is incorrect. Penetration testing is a technique used to actively try to hack a system in a live situation.

Correct Answer:

Hot and cold aisles is correct. Hot and cold aisles create a constant flow of air circulation to prevent buildup of heat emanating from the back of the equipment racks and allow cool air to flow into the front of the equipment racks.

Incorrect Answers:

Power conditioner is incorrect. A power conditioner only helps provide consistent and clean power.

Elevated cable trays is incorrect. Elevated cable trays are used to keep network cabling off the ground, where they could be tripped over and pulled out of their connections.

Humidity controls is incorrect. Humidity controls, although important, do not help with air flow issues in a server room.