Page 17 of 31 · 603 total questions.
An administrator wants to perform a risk assessment without using proprietary company information. Which of the following methods should the administrator use to gather information?
The correct answer is C. Option C: Open-source intelligence
A systems administrator is concerned about vulnerabilities within cloud computing instances. Which of the following is most important for the administrator to consider when architecting a cloud computing environment?
The correct answer is C. Option C: VM escape
A database administrator is updating the company’s SQL database, which stores credit card information for pending purchases. Which of the following is the best method to secure the data against a potential breach?
The correct answer is C. Option C: Tokenization This option keeps traffic private / properly secured as required.
Which of the following is a benefit of vendor diversity?
The correct answer is B. Option B: Zero-day resiliency
An employee used a company’s billing system to issue fraudulent checks. The administrator is looking for evidence of other occurrences of this activity. Which of the following should the administrator examine?
The correct answer is A. Option A: Application logs
An organization is looking to optimize its environment and reduce the number of patches necessary for operating systems. Which of the following will best help to achieve this objective?
The correct answer is D. Option D: Containers
Explanation
A container packages an application and dependencies while sharing the host kernel for lightweight isolation.
Which of the following tasks is typically included in the BIA process?
The correct answer is A. Option A: Estimating the recovery time of systems
Which of the following is a risk of conducting a vulnerability assessment?
The correct answer is A. Option A: A disruption of business operations
Which of the following techniques would attract the attention of a malicious attacker in an insider threat scenario?
The correct answer is A. Option A: Creating a false text file in /docs/salaries
An organization maintains intellectual property that it wants to protect. Which of the following concepts would be most beneficial to add to the company’s security awareness training program?
The correct answer is A. Option A: Insider threat detection This option keeps traffic private / properly secured as required.
An organization plans to expand its operations internationally and needs to keep data at the new location secure. The organization wants to use the most secure architecture model possible. Which of the following models offers the highest level of security?
The correct answer is C. Option C: On-premises This option keeps traffic private / properly secured as required.
Which of the following is the most relevant reason a DPO would develop a data inventory?
The correct answer is B. Option B: To determine the impact in the event of a breach
Which of the following cryptographic solutions protects data at rest?
The correct answer is B. Option B: Full disk encryption
Explanation
Encryption protects confidentiality by making data unreadable without the appropriate key.
Which of the following should an organization use to protect its environment from external attacks conducted by an unauthorized hacker?
The correct answer is D. Option D: NIPS
Explanation
An intrusion prevention system detects and actively blocks malicious traffic inline.
Which of the following would enable a data center to remain operational through a multiday power outage?
The correct answer is A. Option A: Generator
A company installed cameras and added signs to alert visitors that they are being recorded. Which of the following controls did the company implement? (Choose two.)
The correct answer is B, D. Option B: Deterrent Option D: Detective
Which of the following is the best way to securely store an encryption key for a data set in a manner that allows multiple entities to access the key when needed?
The correct answer is D. Option D: Key escrow This option keeps traffic private / properly secured as required.
For which of the following reasons would a systems administrator leverage a 3DES hash from an installer file that is posted on a vendor’s website?
The correct answer is A. Option A: To test the integrity of the file
A company is redesigning its infrastructure and wants to reduce the number of physical servers in use. Which of the following architectures is best suited for this goal?
The correct answer is C. Option C: Virtualization
Which of the following security concepts is being followed when implementing a product that offers protection against DDoS attacks?
The correct answer is A. Option A: Availability This option keeps traffic private / properly secured as required.
Showing questions 321–340 of 603 · Page 17 of 31