A security administrator must implement a secure key exchange protocol that will allow company
clients to autonomously exchange symmetric encryption keys over an unencrypted channel.
Which of the following MUST be implemented?

A security administrator at a company which implements key escrow and symmetric encryption
only, needs to decrypt an employee’s file. The employee refuses to provide the decryption key to
the file. Which of the following can the administrator do to decrypt the file?

A system administrator is setting up a file transfer server. The goal is to encrypt the user
authentication and the files the user is sending using only a user ID and a key pair. Which of the
following methods would achieve this goal?

A company administrator has a firewall with an outside interface connected to the Internet and an
inside interface connected to the corporate network. Which of the following should the
administrator configure to redirect traffic destined for the default HTTP port on the outside
interface to an internal server listening on port 8080?

Which of the following components of an all-in-one security appliance would MOST likely be
configured in order to restrict access to peer-to-peer file sharing websites?

An administrator was asked to review user accounts. Which of the following has the potential to
cause the MOST amount of damage if the account was compromised?

Failure to validate the size of a variable before writing it to memory could result in which of the
following application attacks?

A Human Resources user is issued a virtual desktop typically assigned to Accounting employees.
A system administrator wants to disable certain services and remove the local accounting groups
installed by default on this virtual machine. The system administrator is adhering to which of the
following security best practices?

A business has set up a Customer Service kiosk within a shopping mall. The location will be
staffed by an employee using a laptop during the mall business hours, but there are still concerns
regarding the physical safety of the equipment while it is not in use. Which of the following controls
would BEST address this security concern?

A security administrator wants to implement a solution which will allow some applications to run
under the user’s home directory and only have access to files stored within the same user’s folder,
while other applications have access to shared folders. Which of the following BEST addresses

these requirements if the environment is concurrently shared by multiple users?