Explanation/Reference:
Explanation:
The following four rules apply to what can be contained in a password. The more rules that are met by a password, the stronger the password is.
Passwords should contain uppercase characters
Passwords should contain lowercase characters
Passwords should contain base 10 digits (0 through 9)
Passwords should contain nonalphanumeric characters: ~!@#$%^&*_-+=`|\(){}[]:;"'<>,.?/ Further to the list above, passwords should be at least eight characters long and not include names, usernames or dictionary words.
The password T1me4g0lF meets three of the above rules. It contains uppercase characters, numeric characters and lowercase characters. This is the strongest password of the options given.
Incorrect Answers:
A: golf001 meets only two of the password rules. It contains lowercase and numeric characters. This is not the strongest password.
B: Elizabeth meets only two of the password rules. It contains lowercase and numeric characters.
Furthermore, the password is a name which makes it easier to guess. This is not the strongest password.
D: 'password' is a very weak password. It meets only one password rule (it contains lowercase letters). It is also one of the most easily guessed passwords there is.
References:
http://windows.microsoft.com/en-us/windows-vista/tips-for-creating-a-strong-password

Explanation/Reference:
Explanation:
Remember this is a NOT question. Hot sites do not provide a false sense of security since they are the best disaster recovery alternate for backup site that you rent. A Cold, Warm, and Hot site is always a rental place in the context of the CBK. This is definitely the best choices out of the rental options that exists. It is fully configured and can be activated in a very short period of time. Cold and Warm sites, not hot sites, provide a false sense of security because you can never fully test your plan. In reality, using a cold site will most likely make effective recovery impossible or could lead to business closure if it takes more than two weeks for recovery.
References: KRUTZ, Ronald L. &
VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley
& Sons, 2001, Chapter 8: Business Continuity Planning and
Disaster Recovery Planning (page 284).

The following answers are incorrect: Sniffers alter the source address of a computer to disguise and exploit weak authentication methods. IP Spoofing is a network- based attack, which involves altering the source address of a computer to disguise the attacker and exploit weak authentication methods.
Sniffers take over network connections. Session Hijacking tools allow an attacker to take over network connections, kicking off the legitimate user or sharing a login.
Sniffers send IP fragments to a system that overlap with each other. Malformed Packet attacks are a type of DoS attack that involves one or two packets that are formatted in an unexpected way. Many vendor product implementations do not take into account all variations of user entries or packet types. If software handles such errors poorly, the system may crash when it receives such packets. A classic example of this type of attack involves sending IP fragments to a system that overlap with each other (the fragment offset values are incorrectly set. Some unpatched Windows and Linux systems will crash when the encounter such packets.
The following reference(s) were/was used to create this question:
Source: TIPTON, Harold F. & KRAUSE, MICKI, Information Security Management
Handbook, 4th Edition, Volume 2, Auerbach, NY, NY 2001, Chapter 22, Hacker Tools and
Techniques by Ed Skoudis.
ISC2 OIG, 2007 p. 137-138, 419

Asynchronous Communication transfers data by sending bits of data in irregular timing patterns. In asynchronous transmission each character is transmitted separately, that is one character at a time. The character is preceded by a start bit, which tells the receiving end where the character coding begins, and is followed by a stop bit, which tells the receiver where the character coding ends. There will be intervals of ideal time on the channel shown as gaps. Thus there can be gaps between two adjacent characters in the asynchronous communication scheme. In this scheme, the bits within the character frame (including start, parity and stop bits) are sent at the baud rate.
The START BIT and STOP BIT including gaps allow the receiving and sending computers to
synchronise the data transmission. Asynchronous communication is used when slow speed
peripherals communicate with the computer. The main disadvantage of asynchronous
communication is slow speed transmission. Asynchronous communication however, does not
require the complex and costly hardware equipments as is required for synchronous transmission.
Asynchronous communication is transmission of data without the use of an external clock signal.
Any timing required to recover data from the communication symbols is encoded within the
symbols. The most significant aspect of asynchronous communications is variable bit rate, or that
the transmitter and receiver clock generators do not have to be exactly synchronized.
The asynchronous communication technique is a physical layer transmission technique which is
most widely used for personal computers providing connectivity to printers, modems, fax
machines, etc.
An asynchronous link communicates data as a series of characters of fixed size and format. Each
character is preceded by a start bit and followed by 1-2 stop bits.
Parity is often added to provide some limited protection against errors occurring on the link.
The use of independent transmit and receive clocks constrains transmission to relatively short
characters (<8 bits) and moderate data rates (< 64 kbps, but typically lower).
The asynchronous transmitter delimits each character by a start sequence and a stop sequence.
The start bit (0), data (usually 8 bits plus parity) and stop bit(s) (1) are transmitted using a shift
register clocked at the nominal data rate.
When asynchronous transmission is used to support packet data links (e.g. IP), then special
characters have to be used ("framing") to indicate the start and end of each frame transmitted.
One character (none as an escape character) is reserved to mark any occurrence of the special
characters within the frame. In this way the receiver is able to identify which characters are part of
the frame and which are part of the "framing".
Packet communication over asynchronous links is used by some users to get access to a network
using a modem.
Most Wide Area Networks use synchronous links and a more sophisticated link protocol
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten
Domains of Computer Security, 2001, John Wiley & Sons, Page 100.
and
http://en.wikipedia.org/wiki/Asynchronous_communication
and
http://www.erg.abdn.ac.uk/users/gorry/course/phy-pages/async.html
and
http://www.ligaturesoft.com/data_communications/async-data-transmission.html

Accreditation: is an administrative declaration by a designated authority that an information system is approved to operate in a particular security configuration with a prescribed set of safeguards. It is usually based on a technical certification of the system's security mechanisms.
Certification: Technical evaluation (usually made in support of an accreditation action) of an information system\'s security features and other safeguards to establish the extent to which the system\'s design and implementation meet specified security requirements.
Source: SHIREY, Robert W., RFC2828: Internet Security Glossary, may 2000.