DRAG DROP
A forensic analyst is asked to respond to an ongoing network attack on a server. Place the items
in the list below in the correct order in which the forensic analyst should preserve them.

Which of the following must be kept secret for a public key infrastructure to remain secure?

Which of the following devices is BEST suited to protect an HTTP-based application that is
susceptible to injection attacks?

Which of the following is best practice to put at the end of an ACL?

An achievement in providing worldwide Internet security was the signing of certificates associated
with which of the following protocols?

A Chief Information Security Officer (CISO) wants to implement two-factor authentication within
the company. Which of the following would fulfill the CISO’s requirements?

Which of the following can a security administrator implement on mobile devices that will help
prevent unwanted people from viewing the data if the device is left unattended?

Which of the following security concepts can prevent a user from logging on from home during the
weekends?

Which of the following would provide the STRONGEST encryption?

During a server audit, a security administrator does not notice abnormal activity. However, a
network security analyst notices connections to unauthorized ports from outside the corporate
network. Using specialized tools, the network security analyst also notices hidden processes
running. Which of the following has MOST likely been installed on the server?