An administrator finds that non-production servers are being frequently compromised,
production servers are rebooting at unplanned times and kernel versions are several
releases behind the version with all current security fixes. Which of the following should the
administrator implement?

An auditor’s report discovered several accounts with no activity for over 60 days. The
accounts were later identified as contractors’ accounts who would be returning in three

months and would need to resume the activities. Which of the following would mitigate and
secure the auditors finding?

Ann, the security administrator, wishes to implement multifactor security. Which of the
following should be implemented in order to compliment password usage and smart cards?

Customers’ credit card information was stolen from a popular video streaming company. A
security consultant determined that the information was stolen, while in transit, from the
gaming consoles of a particular vendor. Which of the following methods should the company
consider to secure this data in the future?

A new intern was assigned to the system engineering department, which consists of the
system architect and system software developer’s teams. These two teams have separate
privileges. The intern requires privileges to view the system architectural drawings and
comment on some software development projects. Which of the following methods should
the system administrator implement?

One of the system administrators at a company is assigned to maintain a secure computer
lab. The administrator has rights to configure machines, install software, and perform user
account maintenance. However, the administrator cannot add new computers to the domain,
because that requires authorization from the Information Assurance Officer. This is an
example of which of the following?

A small business needs to incorporate fault tolerance into their infrastructure to increase
data availability. Which of the following options would be the BEST solution at a minimal
cost?

A new application needs to be deployed on a virtual server. The virtual server hosts a SQL
server that is used by several employees. Which of the following is the BEST approach for
implementation of the new application on the virtual server?

Ann wants to send a file to Joe using PKI. Which of the following should Ann use in order to
sign the file?

During a recent investigation, an auditor discovered that an engineer’s compromised
workstation was being used to connect to SCADA systems while the engineer was not
logged in. The engineer is responsible for administering the SCADA systems and cannot be
blocked from connecting to them. The SCADA systems cannot be modified without vendor
approval which requires months of testing. Which of the following is MOST likely to protect
the SCADA systems from misuse?