Question 1

Which of the following is the MOST effective preventative method to identify security flaws in software?

Options :

A : Monitor performance in production environments.

B : Perform a structured code review.

C : Perform application penetration testing.

D : Use automated security vulnerability testing tods.

Answer: B

Question 2

Why are mobile devices something difficult to investigate in a forensic examination?

Options :

A : There are no forensics tools available for examination.

B : They may have proprietary software installed to protect them.

C : They may contain cryptographic protection.

D : They have password-based security at logon.

Answer: B

Question 3

Which of the following is a PRIMARY advantage of using a third-party identity service?

Options :

A : Consolidation of multiple providers

B : Directory synchronization

C : Web based logon

D : Automated account management

Answer: D

Question 4

When designing a Cyber-Physical System (CPS), which of the following should be a security practitioner's first consideration?

Options :

A : Detection of sophisticated attackers

B : Resiliency of the system

C : Topology of the network used for the system

D : Risk assessment of the system

Answer: B

Question 5

The MAIN use of Layer 2 Tunneling Protocol (L2TP) is to tunnel data

Options :

A : through a firewall at the Session layer

B : through a firewall at the Transport layer

C : in the Point-to-Point Protocol (PPP)

D : in the Payload Compression Protocol (PCP)

Answer: C