156-110 무료 덤프문제 온라인 액세스

A _______ _______ posture provides many levels of security possibilities, for access control.

• A.Flat defensive
• B.Multiple offensive
• C.Layered defensive
• D.Proactive offensive
• E.Reactive defensive

If a firewall receives traffic not explicitly permitted by its security policy, what should the firewall do?

• A.Log and pass the traffic.
• B.Do not log and drop the traffic.
• C.Do not log and pass the traffic.
• D.Log and drop the traffic.
• E.Nothing

You are considering purchasing a VPN solution to protect your organization's information assets. The solution you are reviewing uses RFC-compliant and open-standards encryption schemes. The vendor has submitted the system to a variety of recognized testing authorities. The vendor does not make the source code available to testing authorities.
Does this solution adhere to the secure design principle of open design?

• A.No, because if a software vendor refuses to reveal the source code for a product, it cannot comply with the open-design principle.
• B.Yes, because the methods are open, and the system does not rely on the secrecy of its internal mechanisms to provide protection.
• C.No, because the software vendor submitted the software to testing authorities only, and did not make the software available to the public for testing.
• D.No, because the software vendor could have changed the code after testing, which is not verifiable.
• E.Yes, because the methods were tested by recognized testing authorities, and the source code is protected from vandalism.

A _______ attack uses multiple systems to launch a coordinated attack.

• A.Teardrop
• B.Birthday
• C.FTP Bounce
• D.Distributed denial-of-service
• E.Salami

Which TWO of the following items should be accomplished, when interviewing candidates for a position within an organization?

• A.Hire an investigation agency to run background checks.
• B.Question candidates, using polygraphs.
• C.Contact personal and professional references.
• D.Verify all dates of previous employment.
• E.Run criminal-background checks.