An application developer needs to allow employees to use their network credentials to access a new
application being developed. Which of the following should be configured in the new application to
enable this functionality?

During a routine audit it is discovered that someone has been using a state administrator account to log
into a seldom used server. The person used server. The person has been using the server to view
inappropriate websites that are prohibited to end users. Which of the following could BEST prevent this
from occurring again?

A security engineer would like to analyze the effect of deploying a system without patching it to discover
potential vulnerabilities. Which of the following practices would best allow for this testing while keeping
the corporate network safe?

The internal audit group discovered that unauthorized users are making unapproved changes to various
system configuration settings. This issue occurs when previously authorized users transfer from one
department to another and maintain the same credentials. Which of the following controls can be
implemented to prevent such unauthorized changes in the future?

In order to gain an understanding of the latest attack tools being used in the wild, an administrator puts a
Unix server on the network with the root users password to set root. Which of the following best
describes this technique?

An administrator, Ann, wants to ensure that only authorized devices are connected to a switch. She
decides to control access based on MAC addresses. Which of the following should be configured?

A one time security audit revealed that employees do not have the appropriate access to system
resources. The auditor is concerned with the fact that most of the accounts audited have unneeded
elevated permission to sensitive resources. Which of the following was implemented to detect this issue?

A security analyst has a sample of malicious software and needs to know what the sample in a carefully
controlled and monitored virtual machine to observe the software’s behavior. After the software has run,
the analyst returns the virtual machines OS to a pre-defined know good state using what feature of
virtualization?

Joe, the chief technical officer (CTO) is concerned that the servers and network devices may not be able
to handle the growing needs of the company. He has asked his network engineer to being monitoring the
performance of these devices and present statistics to management for capacity planning. Which of the
following protocols should be used to this?

A security administrator is responsible for ensuring that there are no unauthorized devices utilizing the
corporate network. During a routine scan, the security administrator discovers an unauthorized device
belonging to a user in the marketing department. The user is using an android phone in order to browse
websites. Which of the following device attributes was used to determine that the device was
unauthorized?