1. Recently your users were redirected to a malicious site when theirDNS cache was polluted. What type of attack have you suffered?

A) shoulder surfing
B) pharming
C) Dumpster diving
D) phishing



2. Recently someone stole data from your network, and that data should have been encrypted, but it - s too late to figure out whether it was. What tool could you use to determine if certain types of traffic on your network are encrypted?

A) fuzzer
B) port scanner
C) protocol analyzer
D) password cracker



3. You implemented a procedure whereby a testing team was provided with limited knowledge of the network systems anddevices and could use publicly available information. The organization - s security team was NOT informed that an attack wascoming. What type of test have you implemented?

A) blind test
B) target test
C) full-knowledge test
D) double-blind test



4. Which of the following tenets has been satisfied when an organization takes all the actions it can reasonably take to preventsecurity issues or to mitigate damage if security breaches occur?

A) CIA
B) due diligence
C) due process
D) due care



5. Which SCAP component contains methods for describing and classifying operating systems?

A) CVE
B) CWE
C) CPE
D) CCE