In the process of public key cryptography, which of the following is true?

As per the guidelines in the ISO Security Policy standard, what is the purpose of the section on
Physical and Environmental Security?

During a one week investigation into the security of your network you work on identifying the
information that is leaked to the Internet, either directly or indirectly. One thing you decide to
evaluate is the information stored in the Whois lookup of your organizational website. Of the
following, what pieces of information can be identified via this method?

You are aware of the significance and security risk that Social Engineering plays on your
company. Of the following Scenarios, select those that, just as described, represent potentially
dangerous Social
Engineering:

During the review of the security logs you notice some unusual traffic. It seems that a user has
connected to your Web site ten times in the last week, and each time has visited every single page
on the site. You are concerned this may be leading up to some sort of attack. What is this user
most likely getting ready to do?

What type of cipher is used by an algorithm that encrypts data one bit at a time?

You have just become the senior security professional in your office. After you have taken a
complete inventory of the network and resources, you begin to work on planning for a successful
security implementation in the network. You are aware of the many tools provided for securing
Windows 2003 machines in your network. What is the function of Secedit.exe?

To increase the security of your network and systems, it has been decided that EFS will be
implemented in the appropriate situations. Two users are working on a common file, and often
email this file back and forth between each other. Is this a situation where the use of EFS will
create effective security, and why (or why not)?

Recently, you have seen an increase in intrusion attempts and in network traffic. You decide to
use Snort to run a packet capture and analyze the traffic that is present. Looking at the example,
what type of traffic did Snort capture in this log file?

In order for your newly written security policy to have any weight, it must be implemented. Which
of the following are the three components of a successful Security Policy Implementation in an
organization?