Page 10 of 31 Β· 603 total questions.
Client files can only be accessed by employees who need to know the information and have specified roles in the company. Which of the following best describes this security concept?
The correct answer is B. Option B: Confidentiality This option keeps traffic private / properly secured as required.
Which of the following describes the category of data that is most impacted when it is lost?
The correct answer is D. Option D: Critical
A new employee logs in to the email system for the first time and notices a message from human resources about onboarding. The employee hovers over a few of the links within the email and discovers that the links do not correspond to links associated with the company. Which of the following attack vectors is most likely being used?
The correct answer is B. Option B: Social engineering
Which of the following describes the understanding between a company and a client about what will be provided and the accepted time needed to provide the company with the resources?
The correct answer is A. Option A: SLA
A company that is located in an area prone to hurricanes is developing a disaster recovery plan and looking at site considerations that allow the company to immediately continue operations. Which of the following is the best type of site for this company?
The correct answer is D. Option D: Hot By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.
Which of the following security controls is most likely being used when a critical legacy server is segmented into a private network?
The correct answer is C. Option C: Compensating This option keeps traffic private / properly secured as required.
Which of the following best describes the practice of researching laws and regulations related to information security operations within a specific industry?
The correct answer is C. Option C: Due diligence This option keeps traffic private / properly secured as required.
Which of the following considerations is the most important for an organization to evaluate as it establishes and maintains a data privacy program?
The correct answer is C. Option C: Role as controller or processor
A security analyst is investigating a workstation that is suspected of outbound communication to a command-and-control server. During the investigation, the analyst discovered that logs on the endpoint were deleted. Which of the following logs would the analyst most likely look at next?
The correct answer is B. Option B: Firewall
Explanation
A firewall enforces traffic policy by permitting or blocking connections based on configured rules. This option keeps traffic private / properly secured as required.
An IT manager is putting together a documented plan describing how the organization will keep operating in the event of a global incident. Which of the following plans is the IT manager creating?
The correct answer is A. Option A: Business continuity
A business needs a recovery site but does not require immediate failover. The business also wants to reduce the workload required to recover from an outage. Which of the following recovery sites is the best option?
The correct answer is C. Option C: Warm
A security team is setting up a new environment for hosting the organization's on-premises software application as a cloud-based service. Which of the following should the team ensure is in place in order for the organization to follow security best practices?
The correct answer is A. Option A: Virtualization and isolation of resources This option keeps traffic private / properly secured as required.
A manager receives an email that contains a link to receive a refund. After hovering over the link, the manager notices that the domain's URL points to a suspicious link. Which of the following security practices helped the manager to identify the attack?
The correct answer is A. Option A: End user training This option keeps traffic private / properly secured as required.
A company wants to verify that the software the company is deploying came from the vendor the company purchased the software from. Which of the following is the best way for the company to confirm this information?
The correct answer is A. Option A: Validate the code signature.
Explanation
Network address translation maps addresses between networks and commonly lets private hosts share public connectivity.
A systems administrator notices that one of the systems critical for processing customer transactions is running an end-of-life operating system. Which of the following techniques would increase enterprise security?
The correct answer is B. Option B: Placing the system in an isolated VLAN
Explanation
A VLAN creates a logical layer-2 broadcast domain to segment devices independently of physical location. This option keeps traffic private / properly secured as required.
The Chief Information Security Officer (CISO) at a large company would like to gain an understanding of how the company's security policies compare to the requirements imposed by external regulators. Which of the following should the CISO use?
The correct answer is B. Option B: Internal audit This option keeps traffic private / properly secured as required.
A systems administrator notices that the research and development department is not using the company VPN when accessing various company-related services and systems. Which of the following scenarios describes this activity?
The correct answer is D. Option D: Shadow IT
The marketing department set up its own project management software without telling the appropriate departments. Which of the following describes this scenario?
The correct answer is A. Option A: Shadow IT
Which of the following would best explain why a security analyst is running daily vulnerability scans on all corporate endpoints?
The correct answer is A. Option A: To track the status of patching installations This option keeps traffic private / properly secured as required.
Which of the following is classified as high availability in a cloud environment?
The correct answer is D. Option D: Load balancer
Explanation
A load balancer distributes requests across healthy backends to improve scale and availability.
Showing questions 181β200 of 603 Β· Page 10 of 31