From where can clues about the underlying application environment can be collected?

1. A. From source code
2. B. From file types and directories
3. C. From executable file
4. D. From the extension of the file

Correct Answer: D

DMZ is a network designed to give the public access to the specific internal resources and you might want to do the same thing for guests visiting organizations without compromising the integrity of the internal resources. In general, attacks on the wireless networks fall into four basic categories.
Identify the attacks that fall under Passive attacks category.

1. A. Wardriving
2. B. Spoofing
3. C. Sniffing
4. D. Network Hijacking

Correct Answer: A

Today, most organizations would agree that their most valuable IT assets reside within applications and databases. Most would probably also agree that these are areas that have the weakest levels of security, thus making them the prime target for malicious activity from system administrators, DBAs, contractors, consultants, partners, and customers.

Which of the following flaws refers to an application using poorly written encryption code to securely encrypt and store sensitive data in the database and allows an attacker to steal or modify weakly protected data such as credit card numbers, SSNs, and other authentication credentials?

1. A. SSI injection attack
2. B. Insecure cryptographic storage attack
3. C. Hidden field manipulation attack
4. D. Man-in-the-Middle attack

Correct Answer: B

The Internet is a giant database where people store some of their most private information on the cloud, trusting that the service provider can keep it all safe. Trojans, Viruses, DoS attacks, website defacement, lost computers, accidental publishing, and more have all been sources of major leaks over the last 15 years.

What is the biggest source of data leaks in organizations today?

1. A. Weak passwords and lack of identity management
2. B. Insufficient IT security budget
3. C. Rogue employees and insider attacks
4. D. Vulnerabilities, risks, and threats facing Web sites

Correct Answer: C

In which of the following firewalls are the incoming or outgoing packets blocked from accessing services for which there is no proxy?

1. A. Circuit level firewalls
2. B. Packet filters firewalls
3. C. Stateful multilayer inspection firewalls
4. D. Application level firewalls

Correct Answer: D