603 practice questions with answers and explanations.
Which of the following threat actors is the most likely to be hired by a foreign government to attack critical systems located in other countries?
The correct answer is A. Option A: Hacktivist
Which of the following is used to add extra complexity before using a one-way data transformation algorithm?
The correct answer is D. Option D: Salting
Explanation
A unique random salt makes identical passwords produce different hashes and defeats precomputed hash tables.
An employee clicked a link in an email from a payment website that asked the employee to update contact information. The employee entered the log-in information but received a “page not found” error message. Which of the following types of social engineering attacks occurred?
The correct answer is D. Option D: Phishing
Explanation
Phishing uses deceptive communication to obtain credentials, money, or execution of malicious content.
An enterprise is trying to limit outbound DNS traffic originating from its internal network. Outbound DNS requests will only be allowed from one device with the IP address 10.50.10.25. Which of the following firewall ACLs will accomplish this goal?
The correct answer is D. Option D: Access list outbound permit 10.50.10.25/32 0.0.0.0/0 port 53Access list outbound deny 0.0.0.0/0 0.0.0.0/0 port 53
A data administrator is configuring authentication for a SaaS application and would like to reduce the number of credentials employees need to maintain. The company prefers to use domain credentials to access new SaaS applications. Which of the following methods would allow this functionality?
The correct answer is A. Option A: SSO
Which of the following scenarios describes a possible business email compromise attack?
The correct answer is A. Option A: An employee receives a gift card request in an email that has an executive’s name in the display field of the email.
A company prevented direct access from the database administrators’ workstations to the network segment that contains database servers. Which of the following should a database administrator use to access the database servers?
The correct answer is A. Option A: Jump server
An organization’s internet-facing website was compromised when an attacker exploited a buffer overflow. Which of the following should the organization deploy to best protect against similar attacks in the future?
The correct answer is B. Option B: WAF This option decouples the components so they scale independently and absorb load spikes.
An administrator notices that several users are logging in from suspicious IP addresses. After speaking with the users, the administrator determines that the employees were not logging in from those IP addresses and resets the affected users’ passwords. Which of the following should the administrator implement to prevent this type of attack from succeeding in the future?
The correct answer is A. Option A: Multifactor authentication
Explanation
Multifactor authentication requires independent evidence categories, reducing risk from a stolen password.
An employee receives a text message that appears to have been sent by the payroll department and is asking for credential verification. Which of the following social engineering techniques are being attempted? (Choose two.)
The correct answer is C, E. Option C: Impersonation Option E: Smishing
Explanation
Network address translation maps addresses between networks and commonly lets private hosts share public connectivity.
Several employees received a fraudulent text message from someone claiming to be the Chief Executive Officer (CEO). The message stated: “I’m in an airport right now with no access to email. I need you to buy gift cards for employee recognition awards. Please send the gift cards to following email address.” Which of the following are the best responses to this situation? (Choose two).
The correct answer is B, C. Option B: Add a smishing exercise to the annual company training. Option C: Issue a general email warning to the company.
A company is required to use certified hardware when building networks. Which of the following best addresses the risks associated with procuring counterfeit hardware?
The correct answer is A. Option A: A thorough analysis of the supply chain
Which of the following provides the details about the terms of a test with a third-party penetration tester?
The correct answer is A. Option A: Rules of engagement
A penetration tester begins an engagement by performing port and service scans against the client environment according to the rules of engagement. Which of the following reconnaissance types is the tester performing?
The correct answer is A. Option A: Active
Which of the following is required for an organization to properly manage its restore process in the event of system failure?
The correct answer is B. Option B: DRP
Which of the following vulnerabilities is associated with installing software outside of a manufacturer’s approved software repository?
The correct answer is D. Option D: Side loading
A security analyst is reviewing the following logs: Which of the following attacks is most likely occurring?
The correct answer is A. Option A: Password spraying This option keeps traffic private / properly secured as required.
An analyst is evaluating the implementation of Zero Trust principles within the data plane. Which of the following would be most relevant for the analyst to evaluate?
The correct answer is A. Option A: Secured zones
An engineer needs to find a solution that creates an added layer of security by preventing unauthorized access to internal company resources. Which of the following would be the best solution?
The correct answer is B. Option B: Jump server This option keeps traffic private / properly secured as required.
A company’s web filter is configured to scan the URL for strings and deny access when matches are found. Which of the following search strings should an analyst employ to prohibit access to non-encrypted websites?
The correct answer is B. Option B: http:// This option keeps traffic private / properly secured as required.
Showing questions 1–20 of 603 · Page 1 of 31