QUESTION: 101

Which of the following is a component of a risk assessment?

Administrative safeguards
Physical security
DMZ
Logical interface

Answer(s): A

CompanyXYZ has asked you to assess the security of their perimeter email gateway. From your office in New York, you craft a specially formatted email message and send it across the Internet to an employee of CompanyXYZ. The employee of CompanyXYZ is aware of your test. Your email message looks like this:

From: jim_miller@companyxyz.com
To: michelle_saunders@companyxyz.com Subject: Test message
Date: 4/3/2017 14:37
The employee of CompanyXYZ receives your email message.

This proves that CompanyXYZ’s email gateway doesn’t prevent what?

Email Masquerading
Email Harvesting
Email Phishing
Email Spoofing

Answer(s): D

Reveal Solution Next Question

QUESTION: 103

Bob, a system administrator at TPNQM SA, concluded one day that a DMZ is not needed if he properly configures the firewall to allow access just to servers/ports, which can have direct internet access, and block the access to workstations.
Bob also concluded that DMZ makes sense just when a stateful firewall is available, which is not the case of TPNQM SA.
In this context, what can you say?

Bob can be right since DMZ does not make sense when combined with stateless firewalls
Bob is partially right. He does not need to separate networks if he can create rules by destination IPs, one by one
Bob is totally wrong. DMZ is always relevant when the company has internet servers and workstations
Bob is partially right. DMZ does not make sense when a stateless firewall is available

Answer(s): C

Reveal Solution Next Question

QUESTION: 104

Bob is acknowledged as a hacker of repute and is popular among visitors of "underground" sites.
Bob is willing to share his knowledge with those who are willing to learn, and many have expressed their interest in learning from him. However, this knowledge has a risk associated with it, as it can be used for malevolent attacks as well.
In this context, what would be the most effective method to bridge the knowledge gap between the "black" hats or crackers and the "white" hats or computer security professionals? (Choose the test answer.)

Educate everyone with books, articles and training on risk analysis, vulnerabilities and safeguards.
Hire more computer security monitoring personnel to monitor computer systems and networks.
Make obtaining either a computer security certification or accreditation easier to achieve so more individuals feel that they are a part of something larger than life.
Train more National Guard and reservist in the art of computer security to help out in times of emergency or crises.

Answer(s): A

Reveal Solution Next Question

Free 312-50v11 Exam Braindumps (page: 26)

QUESTION: 101

QUESTION: 102

QUESTION: 103

QUESTION: 104