In which risk assessment stage does the security auditor map the systems and resources on a
network?

Which choice lists the correct order of events in the establishment of a TCP/IP connection?

Which choice lists the components that form security descriptors for Windows NT/2000 objects?

Helga deleted extraneous services from a system to ensure that it is relatively secure from attack.
Which term describes this activity?

A hacker has just changed information during a zone transfer. This attack caused false information
to be passed on to network hosts as if it were legitimate. Which type of server is the target in such
an attack?

Which choice lists the two greatest security problems associated with HTTP?

Your company has suffered several denial-of-service attacks involving Microsoft Outlook e-mail
clients. How can you protect your systems from such attacks in the future, yet still allow client
users to accomplish their jobs?

Which type of attack uses a simple or complex program that self-replicates and/or deposits a
payload on a remote or local computer?

Andreas must advise his users about which client to employ when accessing remote systems.
Which of the following is a connection-oriented protocol that can contain unencrypted password
information from Telnet sessions?

Which application is used to learn about an operating system type and patch level? Which
application is used to learn about an operating system? type and patch level?