Correct Answer:

grep is correct. The grep command is used to print lines that match patterns.

Incorrect Answers:

head is incorrect. The head command is used to output the first part of files.

tail is incorrect. The tail command is used to output the last part of files.

cat is incorrect. The cat command is used to concatenate files and print on the standard output.

Correct Answer:

WPA3 encryption is correct. By using Wi-Fi Protected Access version 3 (WPA3), the strongest encryption currently available for wireless networks, you ensure that if wireless traffic is ever intercepted, its contents cannot be revealed because it is encrypted.

Incorrect Answers:

Careful antenna placement is incorrect. Although careful antenna placement is important to implement, it does not protect the confidentiality of wireless data.

Avoid channel overlaps is incorrect. Although avoiding channel overlaps is important, it does not protect the confidentiality of wireless data.

Authentication to the LDAP server is incorrect. Although authentication into the Lightweight Directory Access Protocol (LDAP) server is important, it does not protect the confidentiality of wireless data.

Correct Answer:

Run each client web service in a virtual machine is correct. Using virtualization, you can run each client’s website on a separate virtual machine (VM) running on the same hardware platform. This allows you to run several VMs on one system, and each VM is isolated from the others, thus preventing security issues with one client web service from affecting other client web services.

Incorrect Answers:

Use shared RAID disk services is incorrect. Using shared redundant array of independent disks (RAID) disk services alone still requires separate servers to run each client web service.

Cluster the web services is incorrect. Clustered web services provide redundancy and protection for a single web service and will not prevent security issues between different client web services.

Create a VLAN for each web service is incorrect. Virtual local area networks (VLANs) will not reduce the amount of hardware you need to use.

Correct Answer:

Use the security budget toward protection of your primary database server instead is correct. The amount of loss in the event of an issue with your backup database server is much less than the actual cost of the security countermeasures used to mitigate the risk. In this case, you could use the security budget for increased protection for your primary server instead.

Incorrect Answers:

All other choices are incorrect. The cost of these solutions is more expensive than the cost of the risk.

Correct Answer:

Access card with PIN is correct. Requiring employees of the government facility to present an access card and enter a personal identification number (PIN) is multifactor authentication, something you have and something you know, and is more secure than single-factor options.

Incorrect Answers:

Password, security guard, and photo security pass are incorrect. Passwords, security guards, and photo identification are all important measures for authentication in different scenarios, but are all single factor in nature

Correct Answer:

Symmetric is correct. In a symmetric encryption scheme, both parties use the same key for encryption and decryption purposes. Both users must possess the same key to send encrypted messages to each other.

Incorrect Answers:

Asymmetric is incorrect. In an asymmetric encryption scheme, everyone uses different but mathematically related keys (a key pair) for encryption and decryption purposes.

RSA and Diffie-Hellman are incorrect. RSA and Diffie-Hellman are both algorithms used within encryption schemes.

Correct Answer:

HTTPS is correct. Hypertext Transfer Protocol over SSL/TLS (HTTPS) provides an encrypted web connection to the router so that you can perform secure administrative tasks.

Incorrect Answers:

Remote shell, Telnet, and HTTP are incorrect. These methods do not provide encrypted access to the router.

Correct Answer:

Blockchain is correct. Blockchains are publicly accessible ledgers that record online transactions, based on peer-to-peer technology. A party initiates a block, which is then verified by all the distributed systems and added to the chain (or rejected if not verified). Each block is bound to the other, and the distributed nature of blockchain means that the ledger is accessible to anyone, making it difficult to cheat the system. Generally, the larger the blockchain, the safer.

Incorrect Answers:

Steganography is incorrect. Steganography is a method of hiding data in another type of media that effectively conceals the existence of the data. This is typically performed by hiding messages in media files.

Symmetric cryptography is incorrect. In a symmetric (sometimes referred to as “secret key”) encryption scheme, both parties use the same key for encryption and decryption purposes.

Perfect forward secrecy is incorrect. Perfect forward secrecy (PFS) is designed, through the utilization of complex cryptographic protocols, to prevent the situation where a compromise of one secret key or message leads to a compromise of previous confidential messages.

Correct Answer:

IPFIX is correct. The IP Flow Information Export (IPFIX) protocol is defined in IETF RFC 7011 as a common representation of flow data and a standard means of communicating, as required for transmitting traffic flow information over a network for collection. Like NetFlow, IPFIX groups traffic into flows to then send on to a centralized collection point. IPFIX is based on NetFlow v9.

Incorrect Answers:

syslogis incorrect. For Unix-based systems, the syslog (system logger) functionality allows all systems on a network to forward their logs to a central syslog server.

NXLog is incorrect. NXLog is an open source, universal log collector across many popular operating systems, such as Windows, Unix, and Linux.

sFlow is incorrect. sFlow, short for “sampled flow,” does not separate traffic into flows, but instead conducts a random sampling of packets to achieve scalability.

Correct Answer:

Use a protocol analyzer to monitor traffic to the router port is correct. A protocol analyzer monitoring the affected router port can determine the source, destination, and data payload of the network packets. From there, you can find the affected device and determine if there is a malware issue or other malfunction.

Incorrect Answers:

Scan the router for malware and make sure the router firmware is up to date are incorrect. The router is not the source of the issue.

Perform a ping sweep on network clients is incorrect. Performing a ping sweep on your network clients will only determine if they are active and responding to requests.