The user of a news service accidently accesses another user’s browsing history. From this the
user can tell what competitors are reading, querying, and researching. The news service has failed
to properly implement which of the following?

A system requires administrators to be logged in as the “root” in order to make administrator
changes. Which of the following controls BEST mitigates the risk associated with this scenario?

A defense contractor wants to use one of its classified systems to support programs from multiple
intelligence agencies. Which of the following MUST be in place between the intelligence agencies
to allow this?

A penetration tester was able to obtain elevated privileges on a client workstation and multiple
servers using the credentials of an employee. Which of the following controls would mitigate these
issues? (Select TWO)

Which of the following is considered the MOST effective practice when securing printers or
scanners in an enterprise environment?

After a few users report problems with the wireless network, a system administrator notices that a
new wireless access point has been powered up in the cafeteria. The access point has the same
SSID as the corporate network and is set to the same channel as nearby access points. However,
the AP has not been connected to the Ethernet network. Which of the following is the MOST likely
cause of the user’s wireless problems?

A network technician at a company, Joe is working on a network device. He creates a rule to
prevent users from connecting to a toy website during the holiday shopping season. This website
is blacklisted and is known to have SQL injections and malware. Which of the following has been
implemented?

Company XYZ has suffered leaks of internally distributed confidential documents. Ann the network
security analyst has been tasked to track down the culprit. She has decided to embed a four letter
string of characters in documents containing proprietary information. Which of the following initial

steps should Ann implement before sending documents?

Which of the following should a company deploy to prevent the execution of some types of
malicious code?

An administrator is investigating a system that may potentially be compromised and sees the
following log entries on the router.
*Jul 15 14:47:29.779: %Router1: list 101 permitted TCP 192.10.3.204(57222) (FastEthernet 0/3) –
> 10.10.1.5 (6667), 3 packets.
*Jul 15 14:47:38.779: %Router1: list 101 permitted TCP 192.10.3.204(57222) (FastEthernet 0/3) –
> 10.10.1.5 (6667), 6 packets.
*Jul 15 14:47:45.779: %Router1: list 101 permitted TCP 192.10.3.204(57222) (FastEthernet 0/3) –
> 10.10.1.5 (6667), 8 packets.
Which of the following BEST describes the compromised system?