Question 1

Why do buffer overflows happen? What is the main cause?

Options :

A : Because buffers can only hold so much data

B : Because of improper parameter checking within the application

C : Because they are an easy weakness to exploit

D : Because of insufficient system memory

Answer: B

Question 2

Which of the following would be LESS likely to prevent an employee from reporting an

incident?

Options :

A : They are afraid of being pulled into something they don't want to be involved with.

B : The process of reporting incidents is centralized.

C : They are afraid of being accused of something they didn't do.

D : They are unaware of the company-s security policies and procedures.

Answer: B

Question 3

Which of the following rules pertaining to a Business Continuity Plan/Disaster Recovery

Plan is incorrect?

Options :

A : In order to facilitate recovery, a single plan should cover all locations.

B :

There should be requirements to form a committee to decide a course of action. These

decisions should be made ahead of time and incorporated into the plan.

C : In its procedures and tasks, the plan should refer to functions, not specific individuals.

D :

Critical vendors should be contacted ahead of time to validate equipment can be

obtained in a timely manner.

Answer: A

Question 4

What security model implies a central authority that define rules and sometimes global

rules, dictating what subjects can have access to what objects?

Options :

A : Flow Model

B : Discretionary access control

C : Mandatory access control

D : Non-discretionary access control

Answer: D

Question 5

Which security model uses division of operations into different parts and requires different

users to perform each part?

Options :

A : Bell-LaPadula model

B : Biba model

C : Clark-Wilson model

D : Non-interference model

Answer: C