QUESTION 44

Which of the following is a common problem, yet commonly overlooked, in regards to physical security in server rooms?

1. Firewalls that do not have a dedicated backup
2. False ceilings
3. Logic bombs
4. Biometric malfunctions

____________________________________________________________________________________________

QUESTION 45

Which tool is best suited for identifying applications and code on a Web server that can lead to a SQL injection attack?

1. A vulnerability scanner
2. A packet sniffer
3. An intrusion-detection system
4. A network switch

__________________________________________________________________________________

QUESTION 48

You have determined that an attack is currently underway on your database server. An attacker is currently logged in, modifying data. You want to preserve logs, caching and other data on this affected server. Which of the following actions will best allow you to stop the attack and still preserve data?

1. Pull the server network cable
2. Shut down the server
3. Back up the system logs
4. Force an instant password reset

___________________________________________________________________________________

QUESTION 49

Which of the following applications can help determine whether a denial-of-service attack is occurring against a network host?

1. The netstat command and a packet sniffer
2. The ps command and a network scanner
3. The ping command and User Manager
4. The iptables command and Windows desktop firewall

_______________________________________________________________________________________________________________

QUESTION 50

You have just deployed an application that uses hash-based checksums to monitor changes in the configuration scripts of a database server that is accessible via the Internet. Which of the following is a primary concern for this solution?

1. The extra hard disk space required to store the database of checksums
2. The amount of memory remaining now that the checksum-based application is running
3. The possibility of a buffer overflow attack leading to a security breach
4. The security of the checksum database on a read-only media format