- (Exam Topic 3)
Kevin, an encryption specialist, implemented a technique that enhances the security of keys used for encryption and authentication. Using this technique, Kevin input an initial key to an algorithm that generated an enhanced key that is resistant to brute-force attacks. What is the technique employed by Kevin to improve the security of encryption keys?

1. A. Key derivation function
2. B. Key reinstallation
3. C. A Public key infrastructure
4. D. Key stretching

Correct Answer: D

- (Exam Topic 1)
Bob is acknowledged as a hacker of repute and is popular among visitors of "underground" sites.
Bob is willing to share his knowledge with those who are willing to learn, and many have expressed their interest in learning from him. However, this knowledge has a risk associated with it, as it can be used for malevolent attacks as well.
In this context, what would be the most effective method to bridge the knowledge gap between the "black" hats or crackers and the "white" hats or computer security professionals? (Choose the test answer.)

1. A. Educate everyone with books, articles and training on risk analysis, vulnerabilities and safeguards.
2. B. Hire more computer security monitoring personnel to monitor computer systems and networks.
3. C. Make obtaining either a computer security certification or accreditation easier to achieve so more individuals feel that they are a part of something larger than life.
4. D. Train more National Guard and reservist in the art of computer security to help out in times of emergency or crises.

Correct Answer: A

- (Exam Topic 2)
Which utility will tell you in real time which ports are listening or in another state?

1. A. Netstat
2. B. TCPView
3. C. Nmap
4. D. Loki

Correct Answer: B

- (Exam Topic 1)
Bob is doing a password assessment for one of his clients. Bob suspects that security policies are not in place. He also suspects that weak passwords are probably the norm throughout the company he is evaluating. Bob is familiar with password weaknesses and key loggers.
Which of the following options best represents the means that Bob can adopt to retrieve passwords from his clients hosts and servers?

1. A. Hardware, Software, and Sniffing.
2. B. Hardware and Software Keyloggers.
3. C. Passwords are always best obtained using Hardware key loggers.
4. D. Software only, they are the most effective.

Correct Answer: A

- (Exam Topic 2)
Vlady works in a fishing company where the majority of the employees have very little understanding of IT let alone IT Security. Several information security issues that Vlady often found includes, employees sharing password, writing his/her password on a post it note and stick it to his/her desk, leaving the computer unlocked, didn’t log out from emails or other social media accounts, and etc.
After discussing with his boss, Vlady decided to make some changes to improve the security environment in his company. The first thing that Vlady wanted to do is to make the employees understand the importance of keeping confidential information, such as password, a secret and they should not share it with other persons.
Which of the following steps should be the first thing that Vlady should do to make the employees in his company understand to importance of keeping confidential information a secret?

1. A. Warning to those who write password on a post it note and put it on his/her desk
2. B. Developing a strict information security policy
3. C. Information security awareness training
4. D. Conducting a one to one discussion with the other employees about the importance of information security

Correct Answer: A