QUESTION: 53

Which of the following acts related to information security in the US establish that the management of an organization is responsible for establishing and maintaining an adequate internal control structure and procedures for financial reporting?

USA Patriot Act 2001
Sarbanes-Oxley 2002
Gramm-Leach-Bliley Act (GLBA)
California SB 1386

Answer(s): A

Reference:

http://www.sec.gov/rules/final/33-8238.htm (see background)

Reveal Solution Next Question

QUESTION: 54

Which one of the following tools of trade is an automated, comprehensive penetration testing product for assessing the specific information security threats to an organization?

Sunbelt Network Security Inspector (SNSI)
CORE Impact
Canvas
Microsoft Baseline Security Analyzer (MBSA)

Answer(s): C

Reveal Solution Next Question

QUESTION: 55

Application security assessment is one of the activity that a pen tester performs in the attack phase. It is designed to identify and assess threats to the organization through bespoke, proprietary applications or systems. It checks the application so that a malicious user cannot access, modify, or destroy data or services within the system.

Identify the type of application security assessment which analyzes the application-based code to confirm that it does not contain any sensitive information that an attacker might use to exploit an application.

Web Penetration Testing
Functionality Testing
Authorization Testing
Source Code Review

Answer(s): D

Reveal Solution Next Question

QUESTION: 56

Wireshark is a network analyzer. It reads packets from the network, decodes them, and presents them in an easy-to- understand format. Which one of the following is the command-line version of Wireshark, which can be used to capture the live packets from the wire or to read the saved capture files?

Tcpdump
Capinfos
Tshark
Idl2wrs

Answer(s): B

Reveal Solution Next Question

Free ECSAV8 Exam Braindumps (page: 15)

QUESTION: 53

Reference:

QUESTION: 54

QUESTION: 55

QUESTION: 56

ECSAV8 Discussions & Posts