In Government Hack, the Number of Fingerprints Stolen Has Jumped to 5.6 Million

Hackers who stole security clearance data on millions of Defense Department and other U.S. government employees got away with about 5.6 million fingerprint records, some 4.5 million more than initially reported, the government states. http://www.entrepreneur.com/article/250964

- Idham Azhari

How to Handle a Crazy Content-Production Calendar

If you're looking to expand your own content production efforts but aren't sure how to find the time in your busy calendar, check out these three tips. http://www.entrepreneur.com/article/250811

- Idham Azhari

4 Questions to Help You Price Your App in a 'Freemium' World

Streaming music, videos and games is still largely free. How do you get your piece of the pie? http://www.entrepreneur.com/article/249062

- Idham Azhari

Email Automation: Why You Need to Automate and How to Use It

From onboarding new subscribers and nurturing leads to creating deeper and ongoing conversations with your long-term loyal audience, email automation is ripe with benefits. http://www.entrepreneur.com/article/250830

- Idham Azhari

The Story Behind Brooklyn Brewery's Iconic Label

'It boiled down all the images I had in my head, and expressed them in an elegant, simple way. I think that's what great design does.' http://www.entrepreneur.com/article/250790

- Idham Azhari

The 5 Ws of Outsourcing Your Company's Content Creation

Content creation can get a bit out of hand, especially if you've made the brave decision to outsource some of the work. Trying to keep quality high, content on time and projects organized feels like a full-time job. http://www.entrepreneur.com/article/250487

- Idham Azhari

How to Compete With a Billion-Dollar Business on Google

Even if your competition has hundreds of thousands of dollars allocated to its marketing budget, that doesn't mean it has effective SEO. http://www.entrepreneur.com/article/250756

- Idham Azhari

The 7 Factors That Make for Viral Content

There is no formula for creating content people will share but there are some essentials that make it far more likely they will. http://www.entrepreneur.com/article/250249

- Idham Azhari

Logo Design Inspiration - 18 September 2015

- Idham Azhari

CISSP Exam Preparation (Question 313)

(313) Open box testing, in the Flaw Hypothesis Methodology of Penetration Testing applies to the analysis of

A. Routers and firewalls

B. Host-based IDS systems

C. Network-based IDS systems

D. General purpose operating systems

Correct Answer: D

Explanation

Explanation/Reference:

Explanation:

Flaw Hypothesis Methodology - A system analysis and penetration technique where specifications and documentation for the system are analyzed and then flaws in the system are hypothesized. The list of hypothesized flaws is then prioritized on the basis of the estimated probability that a flaw actually exists and, assuming a flaw does exist, on the ease of exploiting it and on the extent of control or compromise it would provide. The prioritized list is used to direct the actual testing of the system. http://www.kernel.org/pub/linux/ libs/security/Orange-Linux/refs/Orange/Orange0-5.html

- Idham Azhari

Using Cyber Risk Intelligence to Identify the Controls You Should Focus On

http://www.isaca.org/Knowledge-Center/Blog/Lists/Posts/Post.aspx?ID=544

- Idham Azhari

15 One-Sentence Chunks of Online Marketing Advice You Can Use Today

SEO, pay per click, content marketing and more: It's here, it's concise, it's proven. http://www.entrepreneur.com/article/250681

- Idham Azhari

3 Simple Ways to Get More Shares on Facebook

Here are a few tips on how to create more shareable posts and campaigns. http://www.entrepreneur.com/article/250531

- Idham Azhari

The 5 Ultimate Content-Marketing Tools

Find everything you need for the best campaigns with this go-to list. http://www.entrepreneur.com/article/250475

- Idham Azhari

Customized Malware-The Game Changer

http://www.isaca.org/Knowledge-Center/Blog/Lists/Posts/Post.aspx?ID=543

- Idham Azhari

How to Use Social-Media Stats and Reports to Tell What is Working and What Isn't

To get the most out of your social-media marketing strategies, you need to have a solid understanding of the analytics. http://www.entrepreneur.com/article/250544

- Idham Azhari

5 Things You Do Everyday That Make You Vulnerable Online

You could be putting your personal information at risk without even realizing it. http://www.entrepreneur.com/article/250405

- Idham Azhari

A 6-Step Checklist to Get Your Online Business Ready for the Holiday Season

Waiting too long puts you at a severe disadvantage -- you need to be ready to capitalize on the increased traffic and the mindset of consumers during this period. http://www.entrepreneur.com/article/250399

- Idham Azhari

Why We Hate Logo Redesigns

Change is never easy. http://www.entrepreneur.com/article/250559

- Idham Azhari

3 Questions to Ask When Deciding Between Content Marketing and Native Advertising

Companies are looking to achieve the best results while still running lean and mean, and the industry awaits to see if one strategy will deliver a knockout punch. http://www.entrepreneur.com/article/248458

- Idham Azhari

Logo Design Inspiration - 11 September 2015

- Muhammad Idham Azhari

CISSP Exam Preparation (Question 312)

(312) Which one of the following is the PRIMARY objective of penetration testing?

A. Assessment

B. Correction

C. Detection

D. Protection

Correct Answer: C

Explanation

Explanation/Reference:

Explanation:

Its goal is to measure an organization's resistance to an attack and to uncover any weakness within the environment...The result of a penetration test is a report given to management describing the list of vulnerabilities that were identified and the severity of those vulnerabilities. - Shon Harris All-in-one CISSP Certification Guide pg 837-839

Not A: Assessment would imply management deciding whether they can live with a given vulnerability.

- Muhammad Idham Azhari

Remaining Driven in Face of Obstacles

http://www.isaca.org/Knowledge-Center/Blog/Lists/Posts/Post.aspx?ID=542

- Muhammad Idham Azhari

How You Can Generate Results From Promoted Pins on Pinterest

Pinterest's devoted users and ability to manufacture intent have made it a great way to drive valuable traffic to your site. http://www.entrepreneur.com/article/249893

- Muhammad Idham Azhari

Attacks are Effectively Unstoppable

http://www.isaca.org/Knowledge-Center/Blog/Lists/Posts/Post.aspx?ID=541

- Muhammad Idham Azhari

The 7 Habits of a Highly Effective Web Marketer

There are as many strategies to improving website performance as there are best practices for doing so -- just ask the Good Idea Fairy. http://www.entrepreneur.com/article/250380

- Muhammad Idham Azhari

12 Sites That Will Teach You Coding for Free

Programming has helped me to become a much better entrepreneur, and you can learn this skill without spending a dime. http://www.entrepreneur.com/article/250323

- Muhammad Idham Azhari

3 Steps to Boost Your Social-Media Marketing With Image Tagging

Use the new online tools that give your brand images enhanced context and make them easier to find. http://www.entrepreneur.com/article/248877

- Muhammad Idham Azhari

From the Top-Keys to Cyber Risk Management for the Executive

http://www.isaca.org/Knowledge-Center/Blog/Lists/Posts/Post.aspx?ID=540

- Muhammad Idham Azhari

Selling Products Online? How to Build a Perfect Checkout Page (Infographic)

A look at how to create a checkout experience that nudges online shoppers to actually buy what they put in their shopping carts. http://www.entrepreneur.com/article/250135

- Muhammad Idham Azhari

3 Inexpensive Ways to Build Up Your Website Content

Fulfilling the demand for information and entertainment can be a challenge for smaller companies with limited manpower and financial resources but working within these limits is not impossible. http://www.entrepreneur.com/article/250049

- Muhammad Idham Azhari

6 Growth-Hacking Tips to Boost Your Website's Traffic

These cheat sheets will help boost lead generation and increase your contacts. http://www.entrepreneur.com/article/250265

- Muhammad Idham Azhari

Logo Design Inspiration - 04 September 2015

- Muhammad Idham Azhari

CISSP Exam Preparation (Question 311)

(311) Which one of the following is a characteristic of a penetration testing project?

A. The project is open-ended until all known vulnerabilities are identified.

B. The project schedule is plotted to produce a critical path.

C. The project tasks are to break into a targeted system.

D. The project plan is reviewed with the target audience.

Correct Answer: C

Explanation

Explanation/Reference:

"One common method to test the strength of your security measures is to perform penetration testing. Penetration testing is a vigorous attempt to break into a protected network using any means necessary." Pg 430 Tittel: CISSP Study Guide

- Muhammad Idham Azhari

17 Ways To Immediately Improve Your Website Traffic

If you need traffic, then this guide is for you. http://www.entrepreneur.com/article/249125

- Muhammad Idham Azhari

3 Ways Social Video Marketing Can Propel Your Brand

This recent trend harnesses the power of emotions to deliver a subtle message to viewers. http://www.entrepreneur.com/article/249848

- Muhammad Idham Azhari

Improve Your Website's Conversion Rates With These 6 Design Tips

Naturally, the more conversions your website produces, the more revenue your business is going to produce. http://www.entrepreneur.com/article/250059

- Muhammad Idham Azhari

How to Create a Social-Media Marketing Plan From Scratch (Infographic)

You should choose the social networks that best fit your strategy and the goals you want to achieve on social media. http://www.entrepreneur.com/article/249306

- Muhammad Idham Azhari

What the Color of Your Logo Says About Your Company (Infographic)

The Golden Arches just wouldn't communicate the same thing if they were purple. http://www.entrepreneur.com/article/247783

- Muhammad Idham Azhari

Logo Design Inspiration - 28 August 2015

- Muhammad Idham Azhari

CISSP Exam Preparation (Question 310)

(310) Management can expect penetration tests to provide all of the following EXCEPT

A. identification of security flaws

B. demonstration of the effects of the flaws

C. a method to correct the security flaws.

D. verification of the levels of existing infiltration resistance

Correct Answer: C

Explanation

Explanation/Reference:

Explanation:

Penetration testing is a set of procedures designed to test and possibly bypass security controls of a system. Its goal is to measure an organization's resistance to an attack and to uncover any weaknesses within the environment...The result of a penetration test is a report given to management describing the list of vulnerabilities that were identified and the severity of those vulnerabilities. From here, it is up to management to determine how the vulnerabilities are dealt with and what countermeasures are implemented. - Shon Harris All-in-one CISSP Certification Guide pg 837-839

- Muhammad Idham Azhari

Instagram Photos and Videos No Longer Need to Be Square

It's an end of an Insta-era. http://www.entrepreneur.com/article/250035

- Muhammad Idham Azhari

5 Million-Dollar Home-Based Business Ideas You Can Use Today

Teach an online course. Write an ebook. Conceive a product you yourself need. The ideas are out there. Get started! http://www.entrepreneur.com/article/249670

- Muhammad Idham Azhari

How Online Customer Reviews Help SEO and Drive Sales Growth

But, beware: Bad reviews hurt you more than you think. http://www.entrepreneur.com/article/248176

- Muhammad Idham Azhari

3 Simple Tips to Boost Your SEO on YouTube

You need to have a presence on the second largest search engine. Here are a few pointers to get you started. http://www.entrepreneur.com/article/249482

- Muhammad Idham Azhari

Logo Design Inspiration - 21 August 2015

- Muhammad Idham Azhari

CISSP Exam Preparation (Question 309)

(309) Why would an information security policy require that communications test equipment be controlled?

A. The equipment is susceptible to damage

B. The equipment can be used to browse information passing on a network

C. The equipment must always be available for replacement if necessary

D. The equipment can be used to reconfigure the network multiplexers

Correct Answer: B

Explanation

Explanation/Reference:

- Muhammad Idham Azhari

How to Overcome 6 Obstacles Facing Every Online Marketer

The Internet offers a vastly bigger marketing opportunity than ever existed. You're not the only one who finds it overwhelming sometimes. http://www.entrepreneur.com/article/249687

- Muhammad Idham Azhari

Logo Design Inspiration - 14 August 2015

- Muhammad Idham Azhari

CISSP Exam Preparation (Question 308)

(308) Which of the following statements pertaining to ethical hacking is incorrect?

A. An organization should use ethical hackers who do not sell auditing, consulting, hardware, software, firewall, hosting, and/or networking services

B. Testing should be done remotely

C. Ethical hacking should not involve writing to or modifying the target systems

D. Ethical hackers should never use tools that have potential of exploiting vulnerabilities in the organizations IT system.

Correct Answer: D

Explanation

Explanation/Reference:

- Muhammad Idham Azhari

Logo Design Inspiration - 07 August 2015

- Muhammad Idham Azhari

CISSP Exam Preparation (Question 307)

(307) What tool do you use to determine whether a host is vulnerable to known attacks?

A. Padded Cells

B. Vulnerability analysis

C. Honey Pots

D. IDS

Correct Answer: B

Explanation

Explanation/Reference:

Explanation:

Vulnerability analysis (also known as vulnerability assessment) tools test to determine whether a network or host is vulnerable to known attacks. Vulnerability assessment represents a special case of the intrusion detection process. The information sources used are system state attributes and outcomes of attempted attacks. The information sources are collected by a part of the assessment engine. The timing of analysis is interval-based or batch-mode, and the type of analysis is misuse detection. This means that vulnerability assessment systems are essentially batch mode misuse detectors that operate on system state information and results of specified test routines.

- Muhammad Idham Azhari

Logo Design Inspiration - 31 July 2015

- Muhammad Idham Azhari

CISSP Exam Preparation (Question 306)

(306) The absence or weakness in a system that may possibly be exploited is called a(n)?

A. Threat

B. Exposure

C. Vulnerability

D. Risk

Correct Answer: C

Explanation

Explanation/Reference:

- Muhammad Idham Azhari

Logo Design Inspiration - 24 July 2015

- Muhammad Idham Azhari

CISSP Exam Preparation (Question 305)

(305) Which of the following is an advantage of a qualitative over quantitative risk analysis?

A. It prioritizes the risks and identifies areas for immediate improvement in addressing the vulnerabilities.

B. It provides specific quantifiable measurements of the magnitude of the impacts

C. It makes cost-benefit analysis of recommended controls easier

Correct Answer: A

Explanation

Explanation/Reference:

- Muhammad Idham Azhari

Logo Design Inspiration - 10 July 2015

- Muhammad Idham Azhari

CISSP Exam Preparation (Question 304)

(304) How should a risk be handled when the cost of the countermeasures outweighs the cost of the risk?

A. Reject the risk

B. Perform another risk analysis

C. Accept the risk

D. Reduce the risk

Correct Answer: C

Explanation

Explanation/Reference:

- Muhammad Idham Azhari

Logo Design Inspiration - 03 July 2015

- Muhammad Idham Azhari

CISSP Exam Preparation (Question 303)

(303) Risk is commonly expressed as a function of the

A. Systems vulnerabilities and the cost to mitigate.

B. Types of countermeasures needed and the system's vulnerabilities.

C. Likelihood that the harm will occur and its potential impact.

D. Computer system-related assets and their costs.

Correct Answer: C

Explanation

Explanation/Reference:

The likelihood of a threat agent taking advantage of a vulnerability. A risk is the loss potential, or probability, that a threat will exploit a vulnerability. - Shon Harris All-in-one CISSP Certification Guide pg 937

- Muhammad Idham Azhari