A new web server has been provisioned at a third party hosting provider for processing credit card transactions. The security administrator runs the netstat
command on the server and notices that ports 80, 443, and 3389 are in a `listening’ state. No other ports are open. Which of the following services should be
disabled to ensure secure communications?

During a routine audit a web server is flagged for allowing the use of weak ciphers. Which of the following should be disabled to mitigate this risk? (Select TWO).

A vulnerability assessment indicates that a router can be accessed from default port 80 and default port 22. Which of the following should be executed on the
router to prevent access via these ports? (Select TWO).

A security technician is attempting to improve the overall security posture of an internal mail server. Which of the following actions would BEST accomplish this
goal?

The security administrator is analyzing a user’s history file on a Unix server to determine if the user was attempting to break out of a rootjail. Which of the following
lines in the user’s history log shows evidence that the user attempted to escape the rootjail?

A security administrator needs to determine which system a particular user is trying to login to at various times of the day. Which of the following log types would
the administrator check?

Ann, the security administrator, received a report from the security technician, that an unauthorized new user account was added to the server over two weeks ago.
Which of the following could have mitigated this event?

Which of the following types of logs could provide clues that someone has been attempting to compromise the SQL Server database?

How often, at a MINIMUM, should Sara, an administrator, review the accesses and rights of the users on her system?

Joe, a user, in a coffee shop is checking his email over a wireless network. An attacker records the temporary credentials being passed to Joe’s browser. The
attacker later uses the credentials to impersonate Joe and creates SPAM messages. Which of the following attacks allows for this impersonation?