New zero-day attacks are announced on a regular basis against a broad range of technology systems. Which of the following best practices should a security manager do to manage the risks of these attack vectors? (Select TWO).

• A. Create an inventory of applications.
• B. Maintain a list of critical systems.
• C. Establish an emergency response call tree.
• D. Backup the router and firewall configurations.
• E. Update all network diagrams.

Company ABC will test connecting networks with Company XYZ as part of their upcoming merger and are both concerned with minimizing security exposures to each others network throughout the test. Which of the following is the FIRST thing both sides should do prior to connecting the networks?

• A. Determine the necessary data flows between the two companies.
• B. Create a DMZ to isolate the two companies and provide a security inspection point for all intercompany network traffic.
• C. Implement a firewall that restricts everything except the IPSec VPN traffic connecting the two companies.
• D. Implement inline NIPS on the connection points between the two companies.

A large enterprise introduced a next generation firewall appliance into the Internet facing DMZ. All Internet traffic passes through this appliance. Four hours after implementation the network engineering team discovered that traffic through the DMZ now has un-acceptable latency, and is recommending that the new firewall be taken offline. At what point in the implementation process should this problem have been discovered?

• A. During the product selection phase
• B. During the network traffic analysis phase
• C. When writing the RFP for the purchase process
• D. When testing the appliance

An administrator is notified that contract workers will be onsite assisting with a new project.
The administrator wants each worker to be aware of the corporate policy pertaining to USB storage devices. Which of the following should each worker review and understand before beginning work?

• A. Business Partnership Agreement
• B. Interconnection Security Agreement
• C. Memorandum of Understanding
• D. Non-Disclosure Agreement

Customers have recently reported incomplete purchase history and other anomalies while accessing their account history on the web server farm. Upon investigation, it has been determined that there are version mismatches of key e-commerce applications on the production web servers. The development team has direct access to the production servers and is most likely the cause of the different release versions. Which of the following process level solutions would address this problem?

• A. Change development methodology from strict waterfall to agile.
• B. Update the vulnerability management plan to address data discrepancy issues.
• C. Adjust the firewall ACL to prohibit development from directly accessing the production server farm.
• D. Implement change control practices at the organization level.