Which of the following is the BEST security practice to prevent ActiveX controls from running malicious code on a user's web application?

During the security assessment of a new application, a tester attempts to log in to the application but receives the following message incorrect password for given username. Which of the following can the tester recommend to decrease the likelihood that a malicious attacker will receive helpful information?

Which of the following is the use of tools to simulate the ability for an attacker to gain access to a specified network?

During a routine log review, a security analyst has found the following commands that cannot be identified from the Bash history log on the root user.

Which of the following commands should the analyst investigate FIRST?

Which of the following sets of attributes BEST illustrates the characteristics of an insider threat from a security perspective?