As a CISO, you are developing an information security strategy. Which of the following should you conduct first? (Wentz QOTD)
A. Define the current state
B. Conduct gap analysis
C. Develop a roadmap
D. Set out a program policy

Today is the first day of the year 2022. As a CISO, which of the following matters foremost? (Wentz QOTD)
A. Information Security Strategy
B. Information Security Program Policies
C. Security control baselines
D. Organizational objectives

Which of the following is the actual key used to encrypt wireless network traffic in a Wi-Fi Protected Access (WPA)-based network? (Wentz QOTD)
A. The Pre-Shared Key (PSK)
B. MSK (Master Session Key)
C. PMK (Pairwise Master Key)
D. GTK (Group Temporal Key)

Wi-Fi Alliance defines a group of wireless networking protocols based on the IEEE 802.11 standards. Wi-Fi Protected Access (WPA) and its successors are common Wi-Fi security protocols. Which of the following is incorrect about Wi-Fi security? (Wentz QOTD)
A. WPA supports both Pre-Shared Key (PSK) and 802.1X authentication
B. WPA2 supports 128-bit AES-CCM encryption and the 4-way handshake in the Personal profile
C. WPA3 supports 192-bit AES-GCM encryption and Dragonfly handshake in the Enterprise profile
D. Wi-Fi 6 follows 802.11ax that boosts in speed and employs WPA3

You are implementing Wi-Fi networks. Which of the following is the last step when a station connects to the access point? (Wentz QOTD)
A. Association Request
B. 4-Way Handshake
C. Probe Request
D. Authentication Request

A set of computer files are classified as confidential. Which of the following is the most critical control to enforce security policies that emphasize confidentiality? (Wentz QOTD)
A. Marking
B. Journaling
C. Labeling
D. Categorization

When engaging in an HTTPS communication, a web browser verifies the certificate of the webserver. Which of the following is the least efficient way to verify the certificate in performance or verification time? (Wentz QOTD)
A. Certificate expiration date
B. Certificate revocation list
C. HTTP Public Key Pinning
D. Online Certificate Status Protocol (OCSP) stapling

Security control frameworks typically provide hundreds of security controls grouped into various types, categories, or families for organizations to mitigate information security risks. Which of the following is the least common security control type, category, or family? (Wentz QOTD)
A. Cryptography
B. Access control
C. Program management
D. Review of the policies for information security

You are designing tables using a relational database to store customer orders. Which of the following is not a good practice to enforce database integrity? (Wentz QOTD)
A. Limit order total price to the decimal data type
B. Save OrderLineItems as a table related to its parent table, Orders
C. Store comma-separated values (CSV) in a cell to reduce relationships
D. Configure the primary key (PK) as an auto-increment field in each table

Which of the following is incorrect about the Christmas tree attack in the TCP/IP stack? (Wentz QOTD)
A. It can be used to conduct a DoS attack.
B. It can be used as a method of TCP/IP stack fingerprinting.
C. It can succeed only if the Internet Protocol (IP) is working.
D. It alternates UDP headers to observe system responses.