An attacker used an undocumented and unknown application exploit to gain access to a file
server. Which of the following BEST describes this type of attack?

Which of the following is an XML based open standard used in the exchange of
authentication and authorization information between different parties?

Which of the following ports and protocol types must be opened on a host with a host-based
firewall to allow incoming SFTP connections?

A user, Ann, is reporting to the company IT support group that her workstation screen is
blank other than a window with a message requesting payment or else her hard drive will be
formatted. Which of the following types of malware is on Ann’s workstation?

Which of the following controls can be implemented together to prevent data loss in the
event of theft of a mobile device storing sensitive information? (Select TWO).

A way to assure data at-rest is secure even in the event of loss or theft is to use:

A security audit identifies a number of large email messages being sent by a specific user
from their company email account to another address external to the company. These
messages were sent prior to a company data breach, which prompted the security audit. The
user was one of a few people who had access to the leaked data. Review of the suspect’s
emails show they consist mostly of pictures of the user at various locations during a recent
vacation. No suspicious activities from other users who have access to the data were
discovered. Which of the following is occurring?

A security analyst is reviewing firewall logs while investigating a compromised web server.
The following ports appear in the log:
22, 25, 445, 1433, 3128, 3389, 6667
Which of the following protocols was used to access the server remotely?

An organization does not want the wireless network name to be easily discovered. Which of
the following software features should be configured on the access points?

A computer is suspected of being compromised by malware. The security analyst examines
the computer and finds that a service called Telnet is running and connecting to an external
website over port 443. This Telnet service was found by comparing the system’s services to
the list of standard services on the company’s system image. This review process depends
on: