QUESTION 32

Which of the following details should be included in documentation of an attack?

1. An overview of the security policy and suggestions for the next response plan
2. Estimates of how much the attack cost the company, and a list of the applications used by the attacker
3. The time and date of the attack, and the names of employees who were contacted during the response

4. The network resources involved in the attack, and recommendations for thwarting future attacks

_____________________________________________________________________________________________________________________

QUESTION 35

Which of the following can help you authoritatively trace a network flooding attack?

1. Your ISP
2. Firewall logs
3. Router logs
4. Ping

___________________________________________________________________________________________

QUESTION 36

You want to create a certificate for use in a Secure Sockets Layer (SSL) session. Which of the following is responsible for verifying the identity of an individual and also issuing the certificate?

1. Kerberos server
2. Certificate authority
3. Certificate revocation entity
4. Certificate repository

_____________________________________________________________________________________________________

QUESTION 38

Which choice lists typical firewall functions?

1. Creating a VLAN and configuring the intrusion-detection system
2. Issuing alerts and limiting host access
3. Logging traffic and creating a choke point
4. Implementing the security policy and scanning the internal network

__________________________________________________________________________________________________________

QUESTION 43

Which of the following is the primary weakness of symmetric-key encryption?

1. Data encrypted using symmetric-key encryption is subject to corruption during transport.
2. Symmetric-key encryption operates slower than asymmetric-key encryption.
3. Symmetric-key encryption does not provide the service of data confidentiality.
4. Keys created using symmetric-key encryption are difficult to distribute securely.

___________________________________________________________________________________________________