- (Exam Topic 13)
Which of the following is the MOST common method of memory protection?

1. A. Compartmentalization
2. B. Segmentation
3. C. Error correction
4. D. Virtual Local Area Network (VLAN) tagging

Correct Answer: B

- (Exam Topic 14)
Following a penetration test, what should an organization do FIRST?

1. A. Review all security policies and procedures.
2. B. Ensure staff is trained in security.
3. C. Determine if you need to conduct a full security assessment.
4. D. Evaluate the problems identified in the test result.

Correct Answer: D

- (Exam Topic 11)
Secure Sockets Layer (SSL) encryption protects

1. A. data at rest.
2. B. the source IP address.
3. C. data transmitted.
4. D. data availability.

Correct Answer: C

- (Exam Topic 14)
What is the BEST method if an investigator wishes to analyze a hard drive which may be used as evidence?

1. A. Leave the hard drive in place and use only verified and authenticated Operating Systems (OS) utilities ...
2. B. Log into the system and immediately make a copy of all relevant files to a Write Once, Read Many ...
3. C. Remove the hard drive from the system and make a copy of the hard drive's contents using imaging hardware.
4. D. Use a separate bootable device to make a copy of the hard drive before booting the system and analyzing the hard drive.

Correct Answer: C

- (Exam Topic 14)
Which of the following techniques BEST prevents buffer overflows?

1. A. Boundary and perimeter offset
2. B. Character set encoding
3. C. Code auditing
4. D. Variant type and bit length

Correct Answer: B
Some products installed on systems can also watch for input values that might result in buffer overflows, but the best countermeasure is proper programming. This means use bounds checking. If an input value is only sup-posed to be nine characters, then the application should only accept nine characters and no more. Some languages are more susceptible to buffer overflows than others, so programmers should understand these issues, use the right languages for the right purposes, and carry out code review to identify buffer overflow vulnerabilities.