A technician notices an application is intermittently crashing and inserting external code into its process space. What is this action called?

A guest OS shows signs of compromise despite being isolated from the network and internet. What is the likely cause?

Which measure will most effectively slow down an attacker trying to guess passwords using a list of common words?

Which type of question should go at the beginning of a survey?

The accounting department is complaining of unauthorized file changes from a user outside the department. You have been asked, by the CIO, to review the server’s authentication logs associated with a specific user account. The CIO wants to verify an entry exists in the logs from the day before. The server, and its authentication service, has recently undergone extensive vulnerability testing and is confirmed to be secure. Which of the following security properties BEST describes the request from the CIO?

An attacker sends phishing emails with malicious links to access a web server without a valid user account. What vulnerability can be exploited?

An attacker is scanning a network for available devices. A router exposes the fact that it allows easy authentication with no need for a brute force password attack. A server responds to the scan, and is shown to be listening to FTP, SMTP, and IMAP requests. What two threat vectors are present in this scenario?

If your web server’s SSL/TLS private key is stolen, what is the immediate action to take?

A user in shipping inadvertently makes changes to a document on the server intended to be modified by the accounting department. Which of the following BEST describes the security property that has been violated?

To harden a compromised router accessed via the web management console, what change is recommended?