Ann a new security specialist is attempting to access the internet using the company’s open
wireless network. The wireless network is not encrypted: however, once associated, ANN cannot
access the internet or other company resources. In an attempt to troubleshoot, she scans the
wireless network with NMAP, discovering the only other device on the wireless network is a
firewall. Which of the following BEST describes the company’s wireless network solution?

Which of the following, if implemented, would improve security of remote users by reducing
vulnerabilities associated with data-in-transit?

A company wants to improve its overall security posture by deploying environmental controls in its
datacenter. Which of the following is considered an environmental control that can be deployed to
meet this goal?

A programmer must write a piece of code to encrypt passwords and credit card information used
by an online shopping cart. The passwords must be stored using one-way encryption, while credit
card information must be stored using reversible encryption. Which of the following should be used
to accomplish this task? (Select TWO)

A company needs to provide a secure backup mechanism for key storage in a PKI. Which of the
following should the company implement?

A security analyst must ensure that the company’s web server will not negotiate weak ciphers with
connecting web browsers. Which of the following supported list of ciphers MUST the security
analyst disable? (Select THREE)

A company’s application is hosted at a data center. The data center provides security controls for
the infrastructure. The data center provides a report identifying serval vulnerabilities regarding out
of date OS patches. The company recommends the data center assumes the risk associated with
the OS vulnerabilities. Which of the following concepts is being implemented?

Which of the following cryptographic methods is most secure for a wireless access point?

Which of the following is considered an environmental control?

An attacker Joe configures his service identifier to be the same as an access point advertised on a
billboard. Joe then conducts a denial of service attack against the legitimate AP causing users to
drop their connections and then reconnect to Joe’s system with the same SSID. Which of the
following Best describes this type of attack?