9. An IT manager is considering an anti-spam solution. Because one of the primary concerns is e-mail server performance, which solution can be eliminated from consideration? a. Appliance b. Outsourced

c. Server-based

d. Client-based

10. Web beacons are an effective site usage tracker because: a. They use hidden form variables b. Browsers cannot detect them c. Browsers do not block them d. They are encrypted

11. The most effective countermeasure for malware is: a. Rootkit detection b. Decreasing user privilege levels c. Anti-virus d. Firewalls

12. The primary purpose for decreasing user privilege levels is: a. To reduce support costs b. To limit the effects of malware c. To improve system performance d. All of the above

13. Which of the following is NOT normally used in system hardening: a. Changing TCP/IP parameters b. Removing unnecessary services c. Removing unnecessary NICs d. Renaming administrator userids

14. The purpose of input field filtering is: a. To prevent input injection attacks b. To detect application scanning c. To prevent SQL injection attacks d. To detect unsafe code

15. The best time to develop application test plans is: a. During requirements and specifications development b. During application design c. During application testing d. During application coding