When conducting a penetration test of an IT system, an organization should be MOST concerned
with:

What is the BEST action to prevent loss of data integrity or confidentiality in the case of an ecommerce application running on a LAN, processing electronic fund transfers (EFT) and orders?

An IS auditor finds that conference rooms have active network ports. Which of the following is
MOST important to ensure?

The sender of a public key would be authenticated by a:

The FIRST step in a successful attack to a system would be:

The use of digital signatures:

What is the MOST prevalent security risk when an organization implements remote virtual private
network (VPN) access to its network?

The human resources (HR) department has developed a system to allow employees to enroll in
benefits via a web site on the corporate Intranet. Which of the following would protect the
confidentiality of the data?

A firewall is being deployed at a new location. Which of the following is the MOST important factor
in ensuring a successful deployment?

Which of the following would be the GREATEST cause for concern when data are sent over the
Internet using HTTPS protocol?