Developers currently have access to update production servers without going through an approval
process. Which of the following strategies would BEST mitigate this risk?

A security administrator suspects that an increase in the amount of TFTP traffic on the network is
due to unauthorized file transfers, and wants to configure a firewall to block all TFTP traffic. Which
of the following would accomplish this task?

Which of the following is a difference between TFTP and FTP?

A company determines a need for additional protection from rogue devices plugging into physical
ports around the building. Which of the following provides the highest degree of protection from
unauthorized wired network access?

Matt, an administrator, notices a flood fragmented packet and retransmits from an email server.
After disabling the TCP offload setting on the NIC, Matt sees normal traffic with packets flowing in
sequence again. Which of the following utilities was he MOST likely using to view this issue?

Which of the following is characterized by an attacker attempting to map out an organization’s staff
hierarchy in order to send targeted emails?

The Chief Technical Officer (CTO) is worried about an increased amount of malware detected on
end user’s workstations. Which of the following technologies should be recommended to detect
such anomalies?

Which of the following would a security administrator implement in order to discover
comprehensive security threats on a network?

The network security engineer just deployed an IDS on the network, but the Chief Technical
Officer (CTO) has concerns that the device is only able to detect known anomalies. Which of the
following types of IDS has been deployed?

Which of the following is an example of a false positive?