- (Topic 3)
Which of the following identifies the three modes in which Snort can be configured to run?

1. A. Sniffer, Packet Logger, and Network Intrusion Detection System
2. B. Sniffer, Network Intrusion Detection System, and Host Intrusion Detection System
3. C. Sniffer, Host Intrusion Prevention System, and Network Intrusion Prevention System
4. D. Sniffer, Packet Logger, and Host Intrusion Prevention System

Correct Answer: A

- (Topic 8)
What is a sheepdip?

1. A. It is another name for Honeynet
2. B. It is a machine used to coordinate honeynets
3. C. It is the process of checking physical media for virus before they are used in a computer
4. D. None of the above

Correct Answer: C
Also known as a footbath, a sheepdip is the process of checking physical media, such as floppy disks or CD-ROMs, for viruses before they are used in a computer. Typically, a computer that sheepdips is used only for that process and nothing else and is isolated from the other computers, meaning it is not connected to the network. Most sheepdips use at least two different antivirus programs in order to increase effectiveness.

- (Topic 4)
Which of the following ensures that updates to policies, procedures, and configurations are made in a controlled and documented fashion?

1. A. Regulatory compliance
2. B. Peer review
3. C. Change management
4. D. Penetration testing

Correct Answer: C

- (Topic 5)
Which United States legislation mandates that the Chief Executive Officer (CEO) and the Chief Financial Officer (CFO) must sign statements verifying the completeness and accuracy of financial reports?

1. A. Sarbanes-Oxley Act (SOX)
2. B. Gramm-Leach-Bliley Act (GLBA)
3. C. Fair and Accurate Credit Transactions Act (FACTA)
4. D. Federal Information Security Management Act (FISMA)

Correct Answer: A

- (Topic 8)
You may be able to identify the IP addresses and machine names for the firewall, and the names of internal mail servers by:

1. A. Sending a mail message to a valid address on the target network, and examining the header information generated by the IMAP servers
2. B. Examining the SMTP header information generated by using the –mx command parameter of DIG
3. C. Examining the SMTP header information generated in response to an e-mail message sent to an invalid address
4. D. Sending a mail message to an invalid address on the target network, and examining the header information generated by the POP servers

Correct Answer: C