When analyzing the IDS logs, the system administrator notices connections from outside of the
LAN have been sending packets where the Source IP address and Destination IP address are the
same. There have been no alerts sent via email or logged in the IDS. Which type of an alert is
this?

Which of the following descriptions is true about a static NAT?

Which of the following is a component of a risk assessment?

Which United States legislation mandates that the Chief Executive Officer (CEO) and the Chief
Financial Officer (CFO) must sign statements verifying the completeness and accuracy of financial
reports?

What information should an IT system analysis provide to the risk assessor?

Which security strategy requires using several, varying methods to protect IT systems
against attacks?

An IT security engineer notices that the company’s web server is currently being hacked. What
should the engineer do next?

During a penetration test, a tester finds a target that is running MS SQL 2000 with default
credentials. The tester assumes that the service is running with Local System account. How
can this weakness be exploited to access the system?

Which of the following programming languages is most vulnerable to buffer overflow attacks?

Which property ensures that a hash function will not produce the same hashed value for two
different messages?