A company exchanges information with a business partner. An annual audit of the business partner is
conducted against the SLA in order to verify:

Which of the following is the proper way to quantify the total monetary damage resulting from an
exploited vulnerability?

A security administrator needs to implement a system that detects possible intrusions based upon a
vendor provided list. Which of the following BEST describes this type of IDS?

The chief Security Officer (CSO) has reported a rise in data loss but no break ins have occurred. By doing
which of the following is the CSO most likely to reduce the number of incidents?

During a data breach cleanup it is discovered that not all of the sites involved have the necessary data
wiping tools. The necessary tools are quickly distributed to the required technicians, but when should this
problem BEST be revisited?

New magnetic locks were ordered for an entire building. In accordance with company policy, employee
safety is the top priority. In case of a fire where electricity is cut, which of the following should be taken
into consideration when installing the new locks?

A security administrator is trying to encrypt communication. For which of the following reasons should
administrator take advantage of the Subject Alternative Name (SAM) attribute of a certificate?

After a merger between two companies a security analyst has been asked to ensure that the
organization’s systems are secured against infiltration by any former employees that were terminated
during the transition. Which of the following actions are MOST appropriate to harden applications against
infiltration by former employees? (Select TWO)

A new mobile application is being developed in-house. Security reviews did not pick up any major flaws,
however vulnerability scanning results show fundamental issues at the very end of the project cycle.
Which of the following security activities should also have been performed to discover vulnerabilities
earlier in the lifecycle?

A security administrator is creating a subnet on one of the corporate firewall interfaces to use as a DMZ
which is expected to accommodate at most 14 physical hosts. Which of the following subnets would BEST
meet the requirements?