Which of the following can Joe, a security administrator, implement on his network to capture attack details that
are occurring while also protecting his production network?

Joe, an administrator, installs a web server on the Internet that performs credit card transactions for customer
payments. Joe also sets up a second web server that looks like the first web server.
However, the second server contains fabricated files and folders made to look like payments were processed
on this server but really were not. Which of the following is the second server?

Based on information leaked to industry websites, business management is concerned that unauthorized
employees are accessing critical project information for a major, well-known new product. To identify any such
users, the security administrator could:

Which of the following should an administrator implement to research current attack methodologies?

Which of the following would be used to identify the security posture of a network without actually exploiting any
weaknesses?

An administrator is concerned that a company’s web server has not been patched. Which of the following would
be the BEST assessment for the administrator to perform?

Which of the following would a security administrator implement in order to discover comprehensive security
threats on a network?

Which of the following security architecture elements also has sniffer functionality? (Choose two.)

Which of the following BEST allows Pete, a security administrator, to determine the type, source, and flags of
the packet traversing a network for troubleshooting purposes?

Joe, the security administrator, has determined that one of his web servers is under attack. Which of the
following can help determine where the attack originated from?