- (Topic 6)
What are the default passwords used by SNMP? (Choose two.)

1. A. Password
2. B. SA
3. C. Private
4. D. Administrator
5. E. Public
6. F. Blank

Correct Answer: CE
Besides the fact that it passes information in clear text, SNMP also uses well-known passwords. Public and private are the default passwords used by SNMP.

- (Topic 3)
The GET method should never be used when sensitive data such as credit card is being sent to a CGI program. This is because any GET command will appear in the URL, and will be logged by any servers. For example, let's say that you've entered your credit card information into a form that uses the GET method. The URL may appear like this:
https://www.xsecurity-bank.com/creditcard.asp?cardnumber=453453433532234
The GET method appends the credit card number to the URL. This means that anyone with access to a server log will be able to obtain this information. How would you protect from this type of attack?

1. A. Never include sensitive information in a script
2. B. Use HTTPS SSLv3 to send the data instead of plain HTTPS
3. C. Replace the GET with POST method when sending data
4. D. Encrypt the data before you send using GET method

Correct Answer: C

- (Topic 4)
Which of the following is an application that requires a host application for replication?

1. A. Micro
2. B. Worm
3. C. Trojan
4. D. Virus

Correct Answer: D

- (Topic 4)
A security policy will be more accepted by employees if it is consistent and has the support of

1. A. coworkers.
2. B. executive management.
3. C. the security officer.
4. D. a supervisor.

Correct Answer: B

- (Topic 5)
What is the primary drawback to using advanced encryption standard (AES) algorithm with a 256 bit key to share sensitive data?

1. A. Due to the key size, the time it will take to encrypt and decrypt the message hinders
2. B. efficient communication.
3. C. To get messaging programs to function with this algorithm requires complex configurations.
4. D. It has been proven to be a weak cipher; therefore, should not be trusted to protect sensitive data.
5. E. It is a symmetric key algorithm, meaning each recipient must receive the key through a different channel than the message.

Correct Answer: D