An organization is implementing a password management application which requires that all local
administrator passwords be stored and automatically managed. Auditors will be responsible for
monitoring activities in the application by reviewing the logs. Which of the following security
controls is the BEST option to prevent auditors from accessing or modifying passwords in the
application?

Protecting the confidentiality of a message is accomplished by encrypting the message with which
of the following?

A company has recently allowed employees to take advantage of BYOD by installing WAPs
throughout the corporate office. An employee, Joe, has recently begun to view inappropriate
material at work using his personal laptop. When confronted, Joe indicated that he was never told
that he could not view that type of material on his personal laptop. Which of the following should
the company have employees acknowledge before allowing them to access the corporate WLAN
with their personal devices?

A security administrator is tackling issues related to authenticating users at a remote site. There
have been a large number of security incidents that resulted from either tailgating or impersonation
of authorized users with valid credentials. The security administrator has been told to implement
multifactor authentication in order to control facility access. To secure access to the remote facility,
which of the following could be implemented without increasing the amount of space required at
the entrance?

A server is configured to communicate on both VLAN 1 and VLAN 12. VLAN 1 communication
works fine, but VLAN 12 does not. Which of the following MUST happen before the server can
communicate on VLAN 12?

The security administrator notices a user logging into a corporate Unix server remotely as root.

Which of the following actions should the administrator take?

A company has two server administrators that work overnight to apply patches to minimize
disruption to the company. With the limited working staff, a security engineer performs a risk
assessment to ensure the protection controls are in place to monitor all assets including the
administrators in case of an emergency. Which of the following should be in place?

A company’s Chief Information Officer realizes the company cannot continue to operate after a
disaster. Which of the following describes the disaster?

A company plans to expand by hiring new engineers who work in highly specialized areas. Each
engineer will have very different job requirements and use unique tools and applications in their
job. Which of the following is MOST appropriate to use?

Ann, the Chief Technology Officer (CTO), has agreed to allow users to bring their own device
(BYOD) in order to leverage mobile technology without providing every user with a company
owned device. She is concerned that users may not understand the company’s rules, and she
wants to limit potential legal concerns. Which of the following is the CTO concerned with?