Poor password selection is frequently a major security problem for any system's security. Administrators should obtain and use password-guessing programs frequently to identify those users having easily guessed passwords.
Because password-cracking programs are very CPU intensive and can slow the system on which it is running, it is a good idea to transfer the encrypted passwords to a standalone (not networked) workstation. Also, by doing the work on a non-networked machine, any results found will not be accessible by anyone unless they have physical access to that system.
Out of the four choice presented above this is the best choice.
However, in real life you would have strong password policies that enforce complexity requirements and does not let the user choose a simple or short password that can be easily cracked or guessed. That would be the best choice if it was one of the choice presented.
Another issue with password cracking is one of privacy. Many password cracking tools can avoid this by only showing the password was cracked and not showing what the password actually is. It is masking the password being used from the person doing the cracking. Source: National Security Agency, Systems and Network Attack Center (SNAC), The 60 Minute Network Security Guide, February 2002, page 8.

Block the IP address at the perimeter and create a bit level copy of the database
server. Run antivirus scan on the database and add a rule to the IPS to automatically block similar
traffic. It would also be wise to add a rule on your perimeter gateway such as your firewall to block
the suspected external IP address.
The following answers are incorrect:
Contact the FBI or the US Secret Service to give guidance on what steps should be taken?
Before you scream that you are under attack, you must ensure that you are in fact under attack
and some losses has been suffered. The law inforcement authority might not be interested in your
case unless you have suffered losses.
Let the connection stay up because you do not want to disrupt availability?
Although Availability is a great concerned, you must take action to ensure that information is not at
risk.
Shut off the Port to the database and start conducting computer forensics?
Imposing a total shutdown on a critical database might cause more issue. You are not even sure
what the problem is at this stage. A series of PUSH flag indicates a transfer of data which might or
might not be malicious.
The following reference(s) were/was used to create this question:
Experience working with indicent investigation.
The book "Computer Forensics and Investigation" by Thompson Learning

Explanation/Reference:
Explanation:
Ports up to 1023 are called well-known ports and are reserved for server-side services. The sending system must choose a dynamic port higher than 1023 when it sets up a connection with another entity. The dynamic packet-filtering firewall then creates an Access Control List (ACL) that allows the external entity to communicate with the internal system.
Incorrect Answers:
A: A Packet filtering firewall makes access decisions based upon network-level protocol header values. It does not use port numbers.
B: A Circuit level proxy works at the session layer and does not use ports.
D: An Application level proxy works at the packet level, not at the port level.
References:
Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, New York, 2013, p. 640

Explanation/Reference:
Explanation:
Network availability can be defined as an area of the of the Telecommunications and Network Security domain that directly affects the Information Systems Security tenet of Availability.
Incorrect Answers:
A: Netware is a protocol family from the Novell Corporation, and not an area within the Network Security domain.
C: Network acceptability is not an area in the Telecommunications and Network Security domain.
D: Network accountability is not an area in the Telecommunications and Network Security domain.

Secure Electronic Transaction (SET). Originated by VISA and MasterCard as an Internet credit card protocol using digital signatures. SET operates at the application layer which distinguishes it from SSL. SSL operates at the Transport layer. Secure Electronic Transaction (SET) is a system for ensuring the security of financial transactions on the Internet. It was supported initially by Mastercard, Visa, Microsoft, Netscape, and others. With SET, a user is given an electronic wallet (digital certificate) and a transaction is conducted and verified using a combination of digital certificates and digital signatures among the purchaser, a merchant, and the purchaser's bank in a way that ensures privacy and confidentiality. SET makes use of Netscape's Secure Sockets Layer (SSL), Microsoft's Secure Transaction Technology (STT), and Terisa System's Secure Hypertext Transfer Protocol (S-HTTP). SET uses some but not all aspects of a public key infrastructure (PKI).
Here's how SET works:
Assume that a customer has a SET-enabled browser such as Mozilla or Microsoft's Internet
Explorer and that the transaction provider (bank, store, etc.) has a SET-enabled server.
The customer opens a Mastercard or Visa bank account. Any issuer of a credit card is some kind
of bank.
The customer receives a digital certificate. This electronic file functions as a credit card for online
purchases or other transactions. It includes a public key with an expiration date. It has been
through a digital switch to the bank to ensure its validity.
Third-party merchants also receive certificates from the bank. These certificates include the
merchant's public key and the bank's public key.
The customer places an order over a Web page, by phone, or some other means.
The customer's browser receives and confirms from the merchant's certificate that the merchant is
valid.
The browser sends the order information. This message is encrypted with the merchant's public
key, the payment information, which is encrypted with the bank's public key (which can't be read
by the merchant), and information that ensures the payment can only be used with this particular
order.
The merchant verifies the customer by checking the digital signature on the customer's certificate.
This may be done by referring the certificate to the bank or to a third-party verifier.
The merchant sends the order message along to the bank. This includes the bank's public key, the
customer's payment information (which the merchant can't decode), and the merchant's certificate.
The bank verifies the merchant and the message. The bank uses the digital signature on the
certificate with the message and verifies the payment part of the message.
The bank digitally signs and sends authorization to the merchant, who can then fill the order.
Reference(s) used for this question:
Mc Graw Hill, Shon Harris, CISSP All In One (AIO) Book, Sixth Edition, Pages 856-858
and
What is Secure Electronic Transactions (SET) by SearchFinancialSecurity
and
KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of
Computer Security, 2001, John Wiley & Sons, Pages 89, 170.