1. Your company is planning to procure a web conferencing system to cut costs on travel. You have been asked to investigate thesecurity issues that should be considered during this process. Which of the following is not an issue to consider?

A) The potential for the solution to affect network performance
B) The dangers of data being stored on a vendor - s shared server
C) The possibility of information being captured duringtransmission
D) Preventing uninvited guests at meetings



2. Which single sign-on system is used in both UNIX and Microsoft Active Directory?

A) WAYF
B) Kerberos
C) OpenID
D) Shibboleth



3. In which attack does the attacker leave the VM - s normally isolated state and interact directly with the hypervisor?

A) VMEscape
B) XSS
C) cross violation
D) CSRF



4. Which of the following statements regarding the security requirements and responsibilities for personnel is true?

A) All personnel within an organization have some level ofsecurity requirements & responsibilities.
B) Although executive management is responsible for leadingany security initiative, executive management is exemptfrom most of the security requirements & responsibilities.
C) Only management and senior staff have securityrequirements & responsibilities.
D) Only the physical security manager should be concernedwith the organization - s physical security.



5. Which of the following is not an advantage of virtualization?

A) ability to quickly bring up a replica server in the event of lossof the primary server
B) reduced overall use of power in the data center
C) better security
D) dynamic allocation of memory and CPU resources to theservers