Some mobile devices are jail-broken by connecting via USB cable and then exploiting software
vulnerabilities to get kernel-level access. Which of the following attack types represents this
scenario? (Select TWO).

A security company is developing a new cloud-based log analytics platform. Its purpose is to
allow:
Customers to upload their log files to the “big data” platform
Customers to perform remote log search
Customers to integrate into the platform using an API so that third party business intelligence tools
can be used for the purpose of trending, insights, and/or discovery
Which of the following are the BEST security considerations to protect data from one customer
being disclosed to other customers? (Select THREE).

A penetration tester is assessing a mobile banking application. Man-in-the-middle attempts via a
HTTP intercepting proxy are failing with SSL errors. Which of the following controls has likely been
implemented by the developers?

During a software development project review, the cryptographic engineer advises the project
manager that security can be greatly improved by significantly slowing down the runtime of a
hashing algorithm and increasing the entropy by passing the input and salt back during each
iteration. Which of the following BEST describes what the engineer is trying to achieve?

The threat abatement program manager tasked the software engineer with identifying the fastest
implementation of a hash function to protect passwords with the least number of collisions. Which
of the following should the software engineer implement to best meet the requirements?

A security engineer at a bank has detected a Zeus variant, which relies on covert communication
channels to receive new instructions and updates from the malware developers. As a result, NIPS
and AV systems did not detect the configuration files received by staff in emails that appeared as
normal files. Which of the following BEST describes the technique used by the malware
developers?