While troubleshooting a new wireless 802.11 ac network an administrator discovers that several of the
older systems cannot connect. Upon investigation the administrator discovers that the older devices only
support 802.11 and RC4. The administrator does not want to affect the performance of the newer 802.11
ac devices on the network. Which of the following should the administrator do to accommodate all
devices and provide the MOST security?

A security administrator is troubleshooting an authentication issues using a network sniffer. The security
administrator reviews a packet capture of the authentication process and notices that authentication is
performed using extensible markup over SOAP. Which of the following authentication services is the
security administrator troubleshooting?

Given a class C network a technician has been tasked with creating a separate subnet for each of the
eight departments in the company. Which of the following network masks would allow for each
department to have a unique network space and what is the maximum number of hosts each department
could have?

A software security concern when dealing with hardware and devices that have embedded software or
operating systems is:

A major medical corporation is investigating deploying a web based portal for patients to access their
medical records. The medical corporation has a long history of maintaining IT security but is considering
having a third party vendor create the web portal. Which of the following areas is MOST important for the
Chief Information Security Officer to focus on when reviewing proposal from vendors interested in
creating the web portal?

Which of the following authentication methods requires the user, service provider and an identity
provider to take part in the authentication process?

Which of the following types of malware is designed to provide access to a system when normal
authentication fails?

Ann is concerned that the application her team is currently developing is vulnerable to unexpected user
input that could lead to issues within the memory is affected in a detrimental manner leading to potential
exploitation. Which of the following describes this application threat?

Which of the following can be used for both encryption and digital signatures?

A user tries to visit a web site with a revoked certificate. In the background a server from the certificate
authority only sends the browser revocation information about the domain the user is visiting. Which of
the following is being used by the certificate authority in this exchange?