Question 1

Damian is the chief security officer of Enigma Electronics. To block intruders and prevent any environmental accidents, he needs to set a two-factor authenticated keypad lock at the entrance, rig a fire suppression system, and link any video cameras at various corridors to view the feeds in the surveillance room. What layer of network defense-in-depth strategy is he trying to follow?

Options :

A : Physical

B : Perimeter

C : Policies and procedures

D : Host

Answer: A

Question 2

John is working as a network defender at a well-reputed multinational company. He wanted to implement security that can help him identify any future attacks that can be targeted toward his organization and take appropriate security measures and actions beforehand to defend against them. Which one of the following security defense techniques should be implement?

Options :

A : Reactive security approach

B : Retrospective security approach

C : Proactive security approach

D : Preventive security approach

Answer: C

Question 3

Adam, a malicious hacker, is sniffing an unprotected Wi-FI network located in a local store with Wireshark to capture hotmail e-mail traffic. He knows that lots of people are using their laptops for browsing the Web in the store. Adam wants to sniff their e-mail messages traversing the unprotected Wi-Fi network. Which of the following Wireshark filters will Adam configure to display only the packets with hotmail email messages?

Options :

A : (http = "login.pass.com") && (http contains "SMTP")

B : (http contains "email") && (http contains "hotmail")

C : (http contains "hotmail") && (http contains "Reply-To")

D : (http = "login.passport.com") && (http contains "POP3")

Answer: C

Question 4

Which of the following VPN topologies establishes a persistent connection between an organization's main office and its branch offices using a third-party network or the Internet?

Options :

A : Hub-and-Spoke

B : Full Mesh

C : Point-to-Point

D : Star

Answer: A

Question 5

Which of the following things need to be identified during attack surface visualization?

Options :

A : Attacker’s tools, techniques, and procedures

B : Authentication, authorization, and auditing in networks

C : Regulatory frameworks, standards and, procedures for organizations

D : Assets, topologies, and policies of the organization

Answer: A