A quality assurance analyst is reviewing a new software product for security, and has complete
access to the code and data structures used by the developers. This is an example of which of the
following types of testing?

The security consultant is assigned to test a client’s new software for security, after logs show
targeted attacks from the Internet. To determine the weaknesses, the consultant has no access to
the application program interfaces, code, or data structures. This is an example of which of the
following types of testing?

Which of the following types of cryptography should be used when minimal overhead is necessary
for a mobile device?

The server administrator has noted that most servers have a lot of free disk space and low
memory utilization. Which of the following statements will be correct if the server administrator
migrates to a virtual server environment?

Which of the following implementation steps would be appropriate for a public wireless hot-spot?

Configuring key/value pairs on a RADIUS server is associated with deploying which of the
following?

Which of the following preventative controls would be appropriate for responding to a directive to
reduce the attack surface of a specific host?

A security analyst performs the following activities: monitors security logs, installs surveillance
cameras and analyzes trend reports. Which of the following job responsibilities is the analyst
performing? (Select TWO).

A certificate used on an ecommerce web server is about to expire. Which of the following will
occur if the certificate is allowed to expire?

An administrator needs to segment internal traffic between layer 2 devices within the LAN. Which
of the following types of network design elements would MOST likely be used?