A company would like to implement two-factor authentication for its vulnerability management
database to require system administrators to use their token and random PIN codes. Which of the
following authentication services accomplishes this objective?

A company has a corporate infrastructure where end users manage their own certificate keys.
Which of the following is considered the MOST secure way to handle master keys associated with
these certificates?

A recent audit has revealed that several users have retained permissions to systems they should
no longer have rights to after being promoted or changed job positions. Which of the following
controls would BEST mitigate this issue?

Ann a new security specialist is attempting to access the internet using the company’s open
wireless network. The wireless network is not encrypted: however, once associated, ANN cannot
access the internet or other company resources. In an attempt to troubleshoot, she scans the
wireless network with NMAP, discovering the only other device on the wireless network is a
firewall. Which of the following BEST describes the company’s wireless network solution?

Which of the following, if implemented, would improve security of remote users by reducing
vulnerabilities associated with data-in-transit?

A company wants to improve its overall security posture by deploying environmental controls in its
datacenter. Which of the following is considered an environmental control that can be deployed to
meet this goal?

A programmer must write a piece of code to encrypt passwords and credit card information used
by an online shopping cart. The passwords must be stored using one-way encryption, while credit
card information must be stored using reversible encryption. Which of the following should be used
to accomplish this task? (Select TWO)

A company needs to provide a secure backup mechanism for key storage in a PKI. Which of the
following should the company implement?

A security analyst must ensure that the company’s web server will not negotiate weak ciphers with
connecting web browsers. Which of the following supported list of ciphers MUST the security
analyst disable? (Select THREE)

A company’s application is hosted at a data center. The data center provides security controls for
the infrastructure. The data center provides a report identifying serval vulnerabilities regarding out
of date OS patches. The company recommends the data center assumes the risk associated with
the OS vulnerabilities. Which of the following concepts is being implemented?