What is the MOST prevalent security risk when an organization implements remote virtual private
network (VPN) access to its network?

The human resources (HR) department has developed a system to allow employees to enroll in
benefits via a web site on the corporate Intranet. Which of the following would protect the
confidentiality of the data?

A firewall is being deployed at a new location. Which of the following is the MOST important factor
in ensuring a successful deployment?

Which of the following would be the GREATEST cause for concern when data are sent over the
Internet using HTTPS protocol?

After observing suspicious activities in a server, a manager requests a forensic analysis.
Which of the following findings should be of MOST concern to the investigator?

An IS auditor selects a server for a penetration test that will be carried out by a technical specialist.
Which of the following is MOST important?

A company has decided to implement an electronic signature scheme based on public key
infrastructure. The user’s private key will be stored on the computer’s hard drive and protected by
a password. The MOST significant risk of this approach is:

The network of an organization has been the victim of several intruders’ attacks. Which of the
following measures would allow for the early detection of such incidents?

The BEST filter rule for protecting a network from being used as an amplifier in a denial of service
(DoS) attack is to deny all:

A sender of an e-mail message applies a digital signature to the digest of the message.
This action provides assurance of the: