Which of the following programs can be used to detect stealth port scans performed by a malicious hacker?
Each correct answer represents a complete solution. Choose all that apply.

• A. portsentry
• B. libnids
• C. nmap
• D. scanlogd

Mark works as a Network Administrator for We-are-secure Inc. He finds that the We-are-secure server has been infected with a virus. He presents to the company a report that describes the symptoms of the virus. A summary of the report is given below:
- This virus has a dual payload, as the first payload of the virus
changes the first megabyte of the hard drive to zero. Due to this, the
contents of the partition tables are deleted and the computer hangs.
- The second payload replaces the code of the flash BIOS with garbage
values. This virus spreads under the Portable Executable File Format
under Windows 95, Windows 98, and Windows ME.
Which of the following viruses has the symptoms as the one described above?

• A. I Love You
• B. Nimda
• C. Melissa
• D. Chernobyl

You work as a Network Administrator for Tech Perfect Inc. The company has a Windows Server
2008 Active Directory-based single domain single forest network. The functional level of the forest is Windows Server 2008. The company's headquarters is located at Los Angeles. A branch office of the company is located at Denver. You are about to send a message to Rick who is a Network Administrator at Denver. You want to ensure that the message cannot be read by anyone but the recipient. Which of the following keys will you use to encrypt the message?

• A. Your public key
• B. The recipient's private key
• C. Your private key
• D. The recipient's public key

You work as an Administrator for Bluesky Inc. The company has 145 Windows XP Professional client computers and eighty Windows 2003 Server computers. You want to install a security layer of WAP specifically designed for a wireless environment. You also want to ensure that the security layer provides privacy, data integrity, and authentication for client-server communications over a wireless network. Moreover, you want a client and server to be authenticated so that wireless transactions remain secure and the connection is encrypted. Which of the following options will you use to accomplish the task?

• A. Wired Equivalent Privacy (WEP)
• B. Recovery Console
• C. Virtual Private Network (VPN)
• D. Wireless Transport Layer Security (WTLS)

A management workstation collects and connects events from multiple IPS sensors in the network. Which protocol is used in this process?

• A. SDEE
• B. SNMP
• C. SCCP
• D. SRTP