A. An attack that is launched the day the patch is released

B. An attack that has a known attack signature but no available patch

C. An attack that utilizes a vulnerability unknown to the software developer

D. An attack that deploys at the end of a countdown sequence

A. Force the root account to only be accessible from the system console.

B. Run a script at intervals to identify processes running with administrative privilege.

C. Check the log entries to match privilege use with access from authorized users.

A. A centralized time server

B. An up-to-date hardening guide

C. A method of device scanning

D. An inventory of unauthorized assets

A. Public-Key Cryptography

B. Simple Mail Transfer Protocol

C. DNS Security Extensions

D. Sender Policy Framework

A. Automatically close ports and services not included in the current baseline

B. Alert the incident response team on ports and services added since the last scan

C. Uninstall listening services that have not been used since the last scheduled scan

D. Compare discovered ports and services to a known baseline to report deviations

A. How long does it take to identify new unauthorized listening ports on the network systems

B. What percentage of the organization's applications are using sandboxing products

C. How long does it take to remove unauthorized software from the organization's systems

D. What percentage of assets will have their settings enforced and redeployed

E. What percentage of systems in the organization are using Network Level Authentication (NLA)

A. To compare it performance with other systems already on the network

B. To identify root kits included on the system out of the box

C. To allow system to be restored to a known good state if it is compromised

D. To create the ability to separate abnormal behavior from normal behavior during an incident

A. Class diagram

B. Deployment diagram

C. Use case diagram

D. Package diagram

A. A new connection request from the internet is sent to the company's DNS server

B. A new connection request from the Internet is sent to a host on the company 's internal net work

C. A packet originating from the company's DMZ is sent to a host on the company's internal network

D. A packet originating from the company's internal network is sent to the company's DNS server

A. Ngrep

B. CIS-CAT

C. Zenmap

D. Netscreen