A security administrator notices that the log file of the company`s webserver contains suspicious entries:

Based on source code analysis, the analyst concludes that the login.php script is vulnerable to

Which of the following is a detective control?

A penetration tester is attempting to scan an internal corporate network from the internet without
alerting the border sensor. Which is the most efficient technique should the tester consider using?

A circuit level gateway works at which of the following layers of the OSI Model?

Which of the following lists are valid data-gathering activities associated with a risk assessment?

A network security administrator is worried about potential man-in-the-middle attacks when users
access a corporate web site from their workstations. Which of the following is the best remediation
against this type of attack?

Which command line switch would be used in NMAP to perform operating system detection?

Bluetooth uses which digital modulation technique to exchange information between paired
devices?

A security consultant decides to use multiple layers of anti-virus defense, such as end user
desktop anti-virus and E-mail gateway. This approach can be used to mitigate which kind of
attack?

A security policy will be more accepted by employees if it is consistent and has the support of