A helpdesk technician received a phone call from an administrator at a remote branch office. The
administrator claimed to have forgotten the password for the root account on UNIX servers and
asked for it. Although the technician didn’t know any administrator at the branch office, the guy

sounded really friendly and since he knew the root password himself, he supplied the caller with the
password. What type of attack has just occurred?

Andy works as a security manager for SoftTech Inc. He is involved in the BIA phase to create a
document to be used to help understand what impact a disruptive event would have on the
business. Choose and reorder the required steps that he will take to accomplish the BIA phase.

Part of your change management plan details what should happen in the change control system for
your project. Theresa, a junior project manager, asks what the configuration management activities
are for scope changes. You tell her that all of the following are valid configuration management
activities except for which one?

You work as a Network Administrator of a TCP/IP network. You are having DNS resolution problem.
Which of the following utilities will you use to diagnose the problem?

What are the steps related to the vulnerability management program?
Each correct answer represents a complete solution. Choose all that apply.

The IPSec protocol is configured in an organization’s network in order to maintain a complete
infrastructure for secured network communications. IPSec uses four components for this. Which of
the following components reduces the size of data transmitted over congested network connections
and increases the speed of such networks without losing data?

Which of the following is a documentation of guidelines that are used to create archival copies of
important data?

Which of the following is a documentation of guidelines that are used to create archival copies of
important data?

You work as a CSO (Chief Security Officer) for Tech Perfect Inc. You want to perform the following
tasks:

Develop a risk-driven enterprise information security architecture. Deliver security infrastructure
solutions that support critical business initiatives. Which of the following methods will you use to
accomplish these tasks?

Which of the following deals is a binding agreement between two or more persons that is
enforceable by law?