- (Exam Topic 15)
Before implementing an internet-facing router, a network administrator ensures that the equipment is baselined/hardened according to approved configurations and settings. This action provides protection against which of the following attacks?

1. A. Blind spoofing
2. B. Media Access Control (MAC) flooding
3. C. SQL injection (SQLI)
4. D. Ransomware

Correct Answer: B

- (Exam Topic 14)
Compared with hardware cryptography, software cryptography is generally

1. A. less expensive and slower.
2. B. more expensive and faster.
3. C. more expensive and slower.
4. D. less expensive and faster.

Correct Answer: A
Reference:
https://www.ontrack.com/uk/blog/making-data-simple/hardware-encryption-vs-software-encryption-the-simple

- (Exam Topic 14)
Which of the following is a peor entity authentication method for Point-to-Point Protocol (PPP)?

1. A. Challenge Handshake Authentication Protocol (CHAP)
2. B. Message Authentication Code (MAC)
3. C. Transport Layer Security (TLS) handshake protocol
4. D. Challenge-response authentication mechanism

Correct Answer: A

- (Exam Topic 10)
Which of the following BEST mitigates a replay attack against a system using identity federation and Security Assertion Markup Language (SAML) implementation?

1. A. Two-factor authentication
2. B. Digital certificates and hardware tokens
3. C. Timed sessions and Secure Socket Layer (SSL)
4. D. Passwords with alpha-numeric and special characters

Correct Answer: C

- (Exam Topic 11)
What is the PRIMARY difference between security policies and security procedures?

1. A. Policies are used to enforce violations, and procedures create penalties
2. B. Policies point to guidelines, and procedures are more contractual in nature
3. C. Policies are included in awareness training, and procedures give guidance
4. D. Policies are generic in nature, and procedures contain operational details

Correct Answer: D