1. Which of the following best describes Secure FTP?

2. You have implemented a proxy firewall technology that can distinguish between an FTP get command and an FTP put command.

3. You are a consultant for a company that wants to secure its Web services and provide a guarantee to its online customers that all credit card information is securely transferred. Which technology would you recommend?

4. You are having problems with you DNS server. When the users try to open various Web sites, they receive an error saying that the site is not found. You go to one of the machines, open a DOS prompt, and type which command to find out what the problem is?

5. You are setting up a switched network and want to group users by department, which technology would you implement?

6. When encrypting and decrypting data using an asymmetric encryption algorithm, you do which of the following?

7. You are configuring a security policy for your company. Which of the following three components make up the security triad?

8. The main fan in your server died on Wednesday morning. It will be at least two days before it can be replaced. You decide to use another server instead but need to restore the data from the dead one. You have been doing differential backups and the last full backup was performed on Friday evening. The backup doesn't run on weekends. How many backup tapes will you need to restore the data?

9. A system designed to lure an attacker away from a critical system is called a __________.

10. What web-based protocol was developed to standardize the way wireless devices communicate?

11. What is the leading reason many incidents are never reported? [Choose the best answer].

12. SMTP relay is a common exploit used among hackers for what purpose?

13. Unauthorized access has been detected on the network. Someone had been logging in as one of the administrative assistants during off hours. Later, you find out she received an e-mail from the network administrator asking her to supply her password so that he could make changes to her profile. What types of attacks have been executed?

14. Which of the following algorithms is not an example of a symmetric encryption algorithm?

15. The RBAC model can use which of the following types of access?

16. When an attacker compromises systems with installed zombie software and initiates an attack against a victim from a widely distributed number of hosts, this is called what?

17. The enforcement of access control via tasks or groups for system users is achieved in which of the following?

18. A fire involving paper and wood products is likely to be considered what class of fire?

19. Which of the following are methods of sending secure e-mail messages?

20. Which of the following is a hardware or software solution used to protect a network from unauthorized access?

21. Separation of duties is designed to guard against which of the following?

22. Which of the following statements about entrapment and enticement is true?

23. In encryption, when data is broken into several units of varying sizes (dependent on algorithm) and the encryption is applied to those chunks of data. What type of algorithm is that called?

24. Which of the following statements is true about SSL?

25. Which of the following components are not associated with risk?