Which of the following resources does NMAP need to be used as a basic vulnerability scanner
covering several vectors like SMB, HTTP and FTP?

A penetration tester is hired to do a risk assessment of a company’s DMZ. The rules of
engagement states that the penetration test be done from an external IP address with no prior
knowledge of the internal IT systems. What kind of test is being performed?

How can a policy help improve an employee’s security awareness?

Which statement is TRUE regarding network firewalls preventing Web Application attacks?

An organization hires a tester to do a wireless penetration test. Previous reports indicate that the
last test did not contain management or control packets in the submitted traces. Which of the
following is the most likely reason for lack of management or control packets?

Which of the following techniques will identify if computer files have been changed?

Which of the following does proper basic configuration of snort as a network intrusion detection
system require?

When analyzing the IDS logs, the system administrator notices connections from outside of the
LAN have been sending packets where the Source IP address and Destination IP address are the
same. There have been no alerts sent via email or logged in the IDS. Which type of an alert is
this?

Which of the following descriptions is true about a static NAT?

Which United States legislation mandates that the Chief Executive Officer (CEO) and the Chief
Financial Officer (CFO) must sign statements verifying the completeness and accuracy of financial
reports?