- (Exam Topic 3)
Which of the following is MOST important when planning a network audit?

1. A. Determination of IP range in use
2. B. Analysis of traffic content
3. C. Isolation of rogue access points
4. D. Identification of existing nodes

Correct Answer: D

- (Exam Topic 4)
A computer forensic audit is MOST relevant in which of the following situations?

1. A. Inadequate controls in the IT environment
2. B. Mismatches in transaction data
3. C. Missing server patches
4. D. Data loss due to hacking of servers

Correct Answer: D

- (Exam Topic 3)
Which of the following should be the FRST step when developing a data toes prevention (DIP) solution for a large organization?

1. A. Identify approved data workflows across the enterprise.
2. B. Conduct a threat analysis against sensitive data usage.
3. C. Create the DLP pcJc.es and templates
4. D. Conduct a data inventory and classification exercise

Correct Answer: D

- (Exam Topic 1)
Documentation of workaround processes to keep a business function operational during recovery of IT systems is a core part of a:

1. A. business impact analysis (BIA).
2. B. threat and risk assessment.
3. C. business continuity plan (BCP).
4. D. disaster recovery plan (DRP).

Correct Answer: C

- (Exam Topic 2)
Which of the following is a social engineering attack method?

1. A. An employee is induced to reveal confidential IP addresses and passwords by answering questions over the phone.
2. B. A hacker walks around an office building using scanning tools to search for a wireless network to gain access.
3. C. An intruder eavesdrops and collects sensitive information flowing through the network and sells it to third parties.
4. D. An unauthorized person attempts to gain access to secure premises by following an authorized personthrough a secure door.

Correct Answer: A