In order to enter a high-security data center, users are required to speak the correct password into
a voice recognition system. Ann, a member of the sales department, overhears the password and
later speaks it into the system. The system denies her entry and alerts the security team. Which of
the following is the MOST likely reason for her failure to enter the data center?

A company requires that all users enroll in the corporate PKI structure and digitally sign all emails.
Which of the following are primary reasons to sign emails with digital certificates? (Select TWO)

The Chief Information Officer (CIO) has asked a security analyst to determine the estimated costs
associated with each potential breach of their database that contains customer information. Which
of the following is the risk calculation that the CIO is asking for?

A security assurance officer is preparing a plan to measure the technical state of a customer’s
enterprise. The testers employed to perform the audit will be given access to the customer facility
and network. The testers will not be given access to the details of custom developed software
used by the customer. However the testers with have access to the source code for several open
source applications and pieces of networking equipment used at the facility, but these items will
not be within the scope of the audit. Which of the following BEST describes the appropriate
method of testing or technique to use in this scenario? (Select TWO)

Which of the following authentication services combines authentication and authorization in a use
profile and use UDP?

A security administrator is designing an access control system, with an unlimited budget, to allow
authenticated users access to network resources. Given that a multifactor authentication solution
is more secure, which of the following is the BEST combination of factors?

The access control list (ACL) for a file on a server is as follows:
User: rwx
User: Ann: r- –
User: Joe: r- –
Group: rwx

Group: sales: r-x
Other: r-x
Joe and Ann are members of the Human Resources group. Will Ann and Joe be able to run the
file?

Using a protocol analyzer, a security consultant was able to capture employee’s credentials.
Which of the following should the consultant recommend to the company, in order to mitigate the
risk of employees credentials being captured in the same manner in the future?

A Company has recently identified critical systems that support business operations. Which of the
following will once defined, be the requirement for restoration of these systems within a certain
period of time?

The software developer is responsible for writing the code and promoting from the development
network to the quality network. The network administrator is responsible for promoting code to the
application servers. Which of the following practices are they following to ensure application
integrity?