Refer to the information below to answer the question.
A new employee is given a laptop computer with full administrator access. This employee does not
have a personal computer at home and has a child that uses the computer to send and receive email, search the web, and use instant messaging. The organization’s Information Technology (IT)
department discovers that a peer-to-peer program has been installed on the computer using the
employee’s access.
Which of the following solutions would have MOST likely detected the use of peer-to-peer programs
when the computer was connected to the office network?

Refer to the information below to answer the question.A new employee is given a laptop computer with full administrator access. This employee does not
have a personal computer at home and has a child that uses the computer to send and receive email, search the web, and use instant messaging. The organization’s Information Technology (IT)
department discovers that a peer-to-peer program has been installed on the computer using the
employee’s access.
Which of the following methods is the MOST effective way of removing the Peer-to-Peer (P2P)
program from the computer?

Refer to the information below to answer the question.
A new employee is given a laptop computer with full administrator access. This employee does not
have a personal computer at home and has a child that uses the computer to send and receive email, search the web, and use instant messaging. The organization’s Information Technology (IT)
department discovers that a peer-to-peer program has been installed on the computer using the
employee’s access.
Which of the following documents explains the proper use of the organization’s assets?

Refer to the information below to answer the question.
A security practitioner detects client-based attacks on the organization’s network. A plan will be
necessary to address these concerns.
In the plan, what is the BEST approach to mitigate future internal client-based attacks?

Refer to the information below to answer the question.A security practitioner detects client-based attacks on the organization’s network. A plan will be
necessary to address these concerns.
In addition to web browsers, what PRIMARY areas need to be addressed concerning mobile code
used for malicious purposes?

Refer to the information below to answer the question.
A security practitioner detects client-based attacks on the organization’s network. A plan will be
necessary to address these concerns.
What MUST the plan include in order to reduce client-side exploitation?

Refer to the information below to answer the question.
A security practitioner detects client-based attacks on the organization’s network. A plan will be
necessary to address these concerns.
What is the BEST reason for the organization to pursue a plan to mitigate client-based attacks?

Refer to the information below to answer the question.
A large organization uses unique identifiers and requires them at the start of every system session.
Application access is based on job classification. The organization is subject to periodic independent
reviews of access controls and violations. The organization uses wired and wireless networks and
remote access. The organization also uses secure connections to branch offices and secure backup
and recovery strategies for selected information and processes.
Which of the following BEST describes the access control methodology used?

Refer to the information below to answer the question.
A large organization uses unique identifiers and requires them at the start of every system session.
Application access is based on job classification. The organization is subject to periodic independent
reviews of access controls and violations. The organization uses wired and wireless networks and
remote access. The organization also uses secure connections to branch offices and secure backup
and recovery strategies for selected information and processes.
In addition to authentication at the start of the user session, best practice would require reauthentication

Refer to the information below to answer the question.
A large organization uses unique identifiers and requires them at the start of every system session.
Application access is based on job classification. The organization is subject to periodic independent
reviews of access controls and violations. The organization uses wired and wireless networks and
remote access. The organization also uses secure connections to branch offices and secure backup
and recovery strategies for selected information and processes.
Following best practice, where should the permitted access for each department and job
classification combination be specified?