Your company implements a physical access control system (PACS) that uses contactless smart cards. The smart card readers and the identity repository are connected through a stack of switching hubs. Which of the following is the most likely attack against smart cards that leads to a data breach? (Wentz QOTD)
A. Side-channel attack
B. Content addressable memory (CAM) table overflow attack
C. Wiretapping attack
D. Piggyback attack
You installed a secondary DNS server on the same demilitarized zone (DMZ) mediated by a firewall as the primary DNS server to improve the availability of DNS services. Which of the following is the best strategy to support the DNS zone transfer between DNS servers? (Wentz QOTD)
A. Create a firewall policy that allows UDP 53 from the primary DNS server to the secondary
B. Create a firewall policy that allows TCP 53 from the primary DNS server to the secondary
C. Create a firewall policy that allows DNSSEC from the primary DNS server to the secondary
D. Create no firewall policy and have the primary DNS server communicates with the secondary directly
The DNS Security Extensions (DNSSEC) are a collection of new resource records and protocol modifications that add data origin authentication and data integrity to the DNS. Which of the following statements about DNSSEC is correct? (Wentz QOTD)
A. DNSSEC enabled queries and responses are protected by secret-key cryptography.
B. DNSSEC enabled queries and responses are encrypted by private-key cryptography.
C. DNSSEC enabled queries and responses are not encrypted.
D. DNSSEC enabled queries and responses are protected from eavesdropping attacks
Today is Father’s day. Your organization purchased a batch of high-end laptops as gifts for winners of Father of the year. When evaluating the procurement business case, which of the following is most suitable for providing security assurance of the operating system and application software preinstalled on those laptops? (Wentz QOTD)
A. TCSEC
B. CMMI
C. SOC 2 Type II
D. Common Criteria
Your organization needs to access resources on a legacy network that implemented a non-routable network protocol. Which of the following means is most feasible? (Wentz QOTD)
A. VPN
B. Bridge
C. Router
D. Proxy
Your company is implementing a webserver as an intranet portal. Which of the following least aligns with the Zero Trust principles? (Wentz QOTD)
A. Implement HTTPS to support the end-to-end transmission.
B. Put the webserver in the demilitarized zone (DMZ) of the firewall.
C. Install a gateway between the clients and the webserver to monitor and record traffic.
D. Close all firewall ports and require port knocking techniques to open ports dynamically.
Concerns about Sectigo China Team
Sectigo routed my EC code signing order to their China team. The Sectigo validation progress takes way too much time. The dashboard is not updating even if Sectigo has finished phone and organization validation and claims my order is under second approval. All in all, this is a highly unpleasant and trust-loosing experience of Sectigo’s performance and service.
Because of the unprofessional handling from the Sectigo China team and the infamous law and order in China, I am highly concerned about the EC code signing token physically mailed from China.
This is the first time I buy an EV code signing certificate from Sectigo; I’m not sure if the Sectigo China team generates the key pair for customers and controls the private key. I’m not sure either if any software customers have to install before using the token. I don’t trust any software that comes from China.
Software-defined networking (SDN) disassociates the forwarding process of network packets (data plane) from the routing process (control plane). It enables dynamic, programmatically efficient network configuration and improves network performance and monitoring. Which of the following statements about SDN is correct? (Wentz QOTD)
A. SDN is open standards-based and solely associated with the OpenFlow protocol
B. SDN employs a centralized architecture only
C. Switches and routers are located at the data plane
D. Network Function Virtualization (NFV) is part of SDN and belongs to the control plane
Your company decides to build a virtualized data center to provision cloud services as a new business. It is estimated that the financial break-even requires five thousand customers. Which of the following is the best technology to support the new business? (Wentz QOTD)
A. Virtual LAN (VLAN)
B. Private VLAN
C. EAP over LAN
D. Virtual eXtensible Local Area Network (VXLAN)