An attacker is attempting to insert malicious code into an installer file that is available on the

internet. The attacker is able to gain control of the web server that houses both the installer and
the web page which features information about the downloadable file. To implement the attack and
delay detection, the attacker should modify both the installer file and the:

After receiving the hard drive from detectives, the forensic analyst for a court case used a log to
capture corresponding events prior to sending the evidence to lawyers. Which of the following do
these actions demonstrate?

A group of users from multiple departments are working together on a project and will maintain
their digital output in a single location. Which of the following is the BEST method to ensure
access is restricted to use by only these users?

A server administrator discovers the web farm is using weak ciphers and wants to ensure that only
stronger ciphers are accepted. Which of the following ciphers should the administrator implement
in the load balancer? (Select Two)

Which of the following technologies when applied to android and iOS environments, can an
organization use to add security restrictions and encryption to existing mobile applications? (Select
Two)

An application developer has coded a new application with a module to examine all user entries
for the graphical user interface. The module verifies that user entries match the allowed types for
each field and that OS and database commands are rejected before entries are sent for further
processing within the application. These are example of:

Ann, a security administrator is hardening the user password policies. She currently has the
following in place.
Passwords expire every 60 days
Password length is at least eight characters
Passwords must contain at least one capital letter and one numeric character
Passwords cannot be reused until the password has been changed eight times
She learns that several employees are still using their original password after the 60-day forced
change. Which of the following can she implement to BEST mitigate this?

Which of the following BEST describes disk striping with parity?

Which of the following will allow the live state of the virtual machine to be easily reverted after a
failed upgrade?

An organization currently uses FTP for the transfer of large files, due to recent security
enhancements, is now required to use a secure method of file transfer and is testing both SFTP
and FTPS as alternatives. Which of the following ports should be opened on the firewall in order to
test the two alternatives? (Select Two)