Page 11 of 31 · 603 total questions.
Which of the following security measures is required when using a cloud-based platform for IoT management?
The correct answer is A. Option A: Encrypted connection This option keeps traffic private / properly secured as required.
Which of the following threat vectors is most commonly utilized by insider threat actors attempting data exfiltration?
The correct answer is A. Option A: Unidentified removable devices
Which of the following methods to secure credit card data is best to use when a requirement is to see only the last four numbers on a credit card?
The correct answer is C. Option C: Masking This option keeps traffic private / properly secured as required.
The Chief Information Security Officer (CISO) has determined the company is non-compliant with local data privacy regulations. The CISO needs to justify the budget request for more resources. Which of the following should the CISO present to the board as the direct consequence of non-compliance?
The correct answer is A. Option A: Fines This option keeps traffic private / properly secured as required.
Which of the following alert types is the most likely to be ignored over time?
The correct answer is C. Option C: False positive
A security analyst is investigating an application server and discovers that software on the server is behaving abnormally. The software normally runs batch jobs locally and does not generate traffic, but the process is now generating outbound traffic over random high ports. Which of the following vulnerabilities has likely been exploited in this software?
The correct answer is A. Option A: Memory injection This option keeps traffic private / properly secured as required.
An important patch for a critical application has just been released, and a systems administrator is identifying all of the systems requiring the patch. Which of the following must be maintained in order to ensure that all systems requiring the patch are updated?
The correct answer is A. Option A: Asset inventory
Which of the following should a security operations center use to improve its incident response procedure?
The correct answer is A. Option A: Playbooks This option keeps traffic private / properly secured as required.
Which of the following describes an executive team that is meeting in a board room and testing the company's incident response plan?
The correct answer is C. Option C: Tabletop exercise
A healthcare organization wants to provide a web application that allows individuals to digitally report health emergencies. Which of the following is the most important consideration during development?
The correct answer is B. Option B: Availability
Which of the following agreement types defines the time frame in which a vendor needs to respond?
The correct answer is B. Option B: SLA
Which of the following is a feature of a next-generation SIEM system?
The correct answer is B. Option B: Automated response actions
To improve the security at a data center, a security administrator implements a CCTV system and posts several signs about the possibility of being filmed. Which of the following best describe these types of controls? (Choose two.)
The correct answer is B, F. Option B: Deterrent Option F: Detective This option keeps traffic private / properly secured as required.
Which of the following examples would be best mitigated by input sanitization?
The correct answer is A. Option A: alert("Warning!");
An attacker posing as the Chief Executive Officer calls an employee and instructs the employee to buy gift cards. Which of the following techniques is the attacker using?
The correct answer is C. Option C: Impersonating
Explanation
Network address translation maps addresses between networks and commonly lets private hosts share public connectivity.
After conducting a vulnerability scan, a systems administrator notices that one of the identified vulnerabilities is not present on the systems that were scanned. Which of the following describes this example?
The correct answer is A. Option A: False positive
A recent penetration test identified that an attacker could flood the MAC address table of network switches. Which of the following would best mitigate this type of attack?
The correct answer is B. Option B: Port security
A user would like to install software and features that are not available with a smartphone's default software. Which of the following would allow the user to install unauthorized software and enable new features?
The correct answer is C. Option C: Jailbreaking
Which of the following phases of an incident response involves generating reports?
The correct answer is C. Option C: Lessons learned
Which of the following methods would most likely be used to identify legacy systems?
The correct answer is B. Option B: Vulnerability scan
Explanation
A vulnerability scan identifies known weaknesses so remediation can be prioritized.
Showing questions 201–220 of 603 · Page 11 of 31