Correct answer:

A mobile device management (MDM) solution can use automated methods to check a mobile device when it connects to the network and verify that it meets minimum predefined security requirements. A bring your own device (BYOD) policy allows users to connect their personally owned devices to a corporate network.

Incorrect answers:

None of the other answers include methods to check devices.

A corporate-owned, personally enabled (COPE) policy provides some employees with mobile devices and these devices can be monitored by an MDM solution, but COPE isn’t an MDM solution.

A choose your own device (CYOD) policy is similar to a BYOD policy, but only allows users to connect preapproved devices included in the CYOD policy.

A Trusted Platform Module (TPM) is a hardware chip embedded in a computer’s motherboard.

Correct answer:

Corrective controls attempt to reverse the effects of incidents after they occur.

A disaster recovery plan (DRP) helps restore systems after a disaster. Backup and restore procedures help restore data after data is lost.

Incorrect answers:

Intrusion prevention systems (IPSs) are preventive controls.

Forensic analysis is a detective control.

Correct answer:

Authentication is a core requirement of nonrepudiation. It ensures that people can prove their identity.

Incorrect answers:

Identification (such as with a username) is important. However, if users aren’t required to prove their identity with authentication, anyone can impersonate another user.

Confidentiality and integrity are unrelated to nonrepudiation. Confidentiality prevents unauthorized disclosure. Integrity provides assurances that data has not been modified.

Correct answer:

A demilitarized zone (DMZ) is typically created with two firewalls. Using firewalls from two separate vendors provides defense diversity for the DMZ. It requires the attacker to have more skills and knowledge to exploit both firewalls.

Incorrect answers:

Just having two firewalls (of any kind) doesn’t provide defense diversity; instead, the two firewalls must be from different vendors.

Correct answer:

Secure Hashing Algorithm 3 (SHA-3) is a hashing algorithm used to provide integrity through one-way encryption.

Incorrect answers:

RC4 and Advanced Encryption Standard (AES) are both symmetric encryption algorithms.

Transport Layer Security (TLS) uses both symmetric and asymmetric encryption but not one-way encryption.

Correct answer:

The Secure Hashing Algorithm 3 (SHA-3) creates hashes of 224, 256, 384, and 512 bits.

Incorrect answers:

SHA-3 doesn’t create a key used for encryption.

Message Digest 5 (MD5) creates a 128-bit hash.

Correct answer:

Data inference attacks attempt to collect public or unclassified pieces of information to predict or guess an outcome. They can also attempt to gather large quantities of information and attempt to learn details of the information through deduction.

Incorrect answers:

The other answers are distractors and are not valid names of attacks. A tuple is a row within a table, a primary key uniquely identifies each row, and tables are related to each other with primary and foreign keys

Correct answer:

The Address Resolution Protocol (ARP) resolves IP addresses to media access control (MAC) addresses. The ARP command-line tool can be used to show which addresses have been recently resolved.

Incorrect answers:

Domain Name System (DNS) resolves host names to IP addresses.

Network Address Translation (NAT) translates private IP addresses to public IP addresses, and public back to private.

Hypertext Transfer Protocol (HTTP) is used to send files over the Internet.

Correct answer:

Wi-Fi Protected Access 2 (WPA2) is the strongest of the protocols listed.

Incorrect answers:

WPA was created as a temporary replacement for Wired Equivalent Privacy (WEP), which has been deprecated.

WPA2 is a permanent replacement. Temporal Key Integrity Protocol (TKIP) was introduced with WPA to allow increased security without requiring new hardware, but Counter Mode with Cipher Block Chaining Message Authentication Code Protocol (CCMP) is a stronger alternative.

Media access control (MAC) filtering can be used, but it is easily bypassed by spoofing the sender’s MAC address.

Correct answer:

Users, computers, and applications are all subjects. They can be granted access to objects.

Incorrect answer:

Data is an object, not a subject.