A certificate used on an ecommerce web server is about to expire. Which of the following will
occur if the certificate is allowed to expire?

A security engineer is given new application extensions each month that need to be secured prior
to implementation. They do not want the new extensions to invalidate or interfere with existing
application security. Additionally, the engineer wants to ensure that the new requirements are
approved by the appropriate personnel. Which of the following should be in place to meet these
two goals? (Select TWO).

An administrator needs to segment internal traffic between layer 2 devices within the LAN. Which
of the following types of network design elements would MOST likely be used?

During an audit, the security administrator discovers that there are several users that are no longer
employed with the company but still have active user accounts. Which of the following should be
performed?

The security administrator needs to restrict traffic on a layer 3 device to support FTP from a new
remote site. Which of the following secure network administration principles will need to be
implemented?

After a network outage, a PC technician is unable to ping various network devices. The network
administrator verifies that those devices are working properly and can be accessed securely.
Which of the following is the MOST likely reason the PC technician is unable to ping those
devices?

A system administrator has concerns regarding their users accessing systems and secured areas
using others’ credentials. Which of the following can BEST address this concern?

Which of the following ports is used for SSH, by default?

A network administrator has a separate user account with rights to the domain administrator
group. However, they cannot remember the password to this account and are not able to login to
the server when needed. Which of the following is MOST accurate in describing the type of issue
the administrator is experiencing?

The security administrator has been tasked to update all the access points to provide a more
secure connection. All access points currently use WPA TKIP for encryption. Which of the
following would be configured to provide more secure connections?