A network administrator has determined that network performance has degraded due to excessive use of social media and Internet streaming services. Which of the following would be effective for limiting access to these types of services, without completely restricting access to a site?

A. Whitelisting

B. Web content filtering

C. Network segmentation

D. Blacklisting

Malicious code designed to execute in concurrence with a particular event is BEST defined as which of the following?

A. Logic bomb

B. Rootkit

C. Trojan

D. Backdoor

An unauthorized network scan may be detected by parsing network sniffer data for:

A. IP traffic from a single IP address to multiple IP addresses.

B. IP traffic from a single IP address to a single IP address.

C. IP traffic from multiple IP addresses to a single IP address.

D. IP traffic from multiple IP addresses to other networks.

Tcpdump is a tool that can be used to detect which of the following indicators of compromise?

A. Unusual network traffic

B. Unknown open ports

C. Poor network performance

D. Unknown use of protocols

A company that maintains a public city infrastructure was breached and information about future city projects was leaked. After the post-incident phase of the process has been completed, which of the following would be PRIMARY focus of the incident response team?

A. Restore service and eliminate the business impact.

B. Determine effective policy changes.

C. Inform the company board about the incident.

D. Contact the city police for official investigation.