This international organization regulates billions of transactions daily and provides security guidelines to protect personally identifiable information (PII). These security controls provide a baseline and prevent low-level hackers sometimes known as script kiddies from causing a data breach.

Which of the following organizations is being described?

Which of the following is a primary service of the U.S. Computer Security Incident Response Team (CSIRT)?

When does the Payment Card Industry Data Security Standard (PCI-DSS) require organizations to perform external and internal penetration testing?

When setting up a wireless network, an administrator enters a pre-shared key for security. Which of the following is true?

Which Open Web Application Security Project (OWASP) implements a web application full of known vulnerabilities?

Which of the following can take an arbitrary length of input and produce a message digest output of 160 bit?

If an e-commerce site was put into a live environment and the programmers failed to remove the secret entry point that was used during the application development, what is this secret entry point known as?

Which of the following is optimized for confidential communications, such as bidirectional voice and video?

International Organization for Standardization (ISO) standard 27002 provides guidance for compliance by outlining

An ethical hacker for a large security research firm performs penetration tests, vulnerability tests, and risk assessments. A friend recently started a company and asks the hacker to perform a penetration test and vulnerability assessment of the new company as a favor. What should the hacker ' s next step be before starting work on this job?

The Open Web Application Security Project (OWASP) testing methodology addresses the need to secure web applications by providing which one of the following services?

An attacker has captured a target file that is encrypted with public key cryptography. Which of the attacks below is likely to be used to crack the target file?

Advanced encryption standard is an algorithm used for which of the following?

A computer technician is using a new version of a word processing software package when it is discovered that a special sequence of characters causes the entire computer to crash. The technician researches the bug and discovers that no one else experienced the problem. What is the appropriate next step?

While testing the company ' s web applications, a tester attempts to insert the following test script into the search area on the company ' s web site:

< script > alert( " Testing Testing Testing " ) < /script >

Afterwards, when the tester presses the search button, a pop-up box appears on the screen with the text: " Testing Testing Testing " . Which vulnerability has been detected in the web application?