Online Access Free EC0-350 Exam Questions

Which of the following processes evaluates the adherence of an organization to its stated security policy?

• A.Penetration testing
• B.Risk assessment
• C.Vulnerability assessment
• D.Security auditing

A computer technician is using a new version of a word processing software package when it is discovered that a special sequence of characters causes the entire computer to crash. The technician researches the bug and discovers that no one else experienced the problem. What is the appropriate next step?

• A.Notify the vendor of the bug and do not disclose it until the vendor gets a chance to issue a fix.
• B.Find an underground bulletin board and attempt to sell the bug to the highest bidder.
• C.Ignore the problem completely and let someone else deal with it.
• D.Create a document that will crash the computer when opened and send it to friends.

Vulnerability mapping occurs after which phase of a penetration test?

• A.Analysis of host scanning
• B.Passive information gathering
• C.Host scanning
• D.Network level discovery

While performing data validation of web content, a security technician is required to restrict malicious input. Which of the following processes is an efficient way of restricting malicious input?

• A.Validate web content input for query strings.
• B.Validate web content input with scanning tools.
• C.Validate web content input for type, length, and range.
• D.Validate web content input for extraneous queries.

On a default installation of Microsoft IIS web server, under which privilege does the web server software execute?

• A.System
• B.Administrator
• C.Everyone
• D.Guest