Page 20 of 31 · 603 total questions.
A malicious insider from the marketing team alters records and transfers company funds to a personal account. Which of the following methods would be the best way to secure company records in the future?
The correct answer is A. Option A: Permission restrictions This option keeps traffic private / properly secured as required.
An organization is required to provide assurance that its controls are properly designed and operating effectively. Which of the following reports will best achieve the objective?
The correct answer is C. Option C: Independent audit
A systems administrator successfully configures VPN access to a cloud environment. Which of the following capabilities should the administrator use to best facilitate remote administration?
The correct answer is A. Option A: A jump host in the shared services security zone
Which of the following best describes the concept of information being stored outside of its country of origin while still being subject to the laws and requirements of the country of origin?
The correct answer is A. Option A: Data sovereignty
An audit reveals that cardholder database logs are exposing account numbers inappropriately. Which of the following mechanisms would help limit the impact of this error?
The correct answer is D. Option D: Masking
A security analyst attempts to start a company's database server. When the server starts, the analyst receives an error message indicating the database server did not pass authentication. After reviewing and testing the system, the analyst receives confirmation that the server has been compromised and that attackers have redirected all outgoing database traffic to a server under their control. Which of the following MITRE ATT&CK techniques did the attacker most likely use to redirect database traffic?
The correct answer is B. Option B: Process injection This option keeps traffic private / properly secured as required.
A penetration tester enters an office building at the same time as a group of employees despite not having an access badge. Which of the following attack types is the penetration tester performing?
The correct answer is A. Option A: Tailgating
Which of the following enables the ability to receive a consolidated report from different devices on the network?
The correct answer is C. Option C: SIEM
Explanation
A SIEM centralizes and correlates security events to support detection, investigation, and reporting.
Which of the following should an organization focus on the most when making decisions about vulnerability prioritization?
The correct answer is B. Option B: CVSS
An organization needs to monitor its users’ activities in order to prevent insider threats. Which of the following solutions would help the organization achieve this goal?
The correct answer is A. Option A: Behavioral analytics
A customer of a large company receives a phone call from someone claiming to work for the company and asking for the customer’s credit card information. The customer sees the caller ID is the same as the company's main phone number. Which of the following attacks is the customer most likely a target of?
The correct answer is D. Option D: Vishing
A security analyst is reviewing logs to identify the destination of command-and-control traffic originating from a compromised device within the on-premises network. Which of the following is the best log to review?
The correct answer is C. Option C: Firewall
Explanation
A firewall enforces traffic policy by permitting or blocking connections based on configured rules. This option keeps traffic private / properly secured as required.
When trying to access an internal website, an employee reports that a prompt displays, stating that the site is insecure. Which of the following certificate types is the site most likely using?
The correct answer is D. Option D: Self-signed This option keeps traffic private / properly secured as required.
Which of the following would most likely be deployed to obtain and analyze attacker activity and techniques?
The correct answer is C. Option C: Honeypot
Which of the following objectives is best achieved by a tabletop exercise?
The correct answer is A. Option A: Familiarizing participants with the incident response process
Explanation
Incident response prepares for, detects, contains, eradicates, and recovers from security incidents while preserving evidence.
The private key for a website was stolen, and a new certificate has been issued. Which of the following needs to be updated next?
The correct answer is B. Option B: CRL This option keeps traffic private / properly secured as required.
Which of the following organizational documents is most often used to establish and communicate expectations associated with integrity and ethical behavior within an organization?
The correct answer is A. Option A: AUP
Which of the following explains how to determine the global regulations that data is subject to regardless of the country where the data is stored?
The correct answer is B. Option B: Data sovereignty
An organization's web servers host an online ordering system. The organization discovers that the servers are vulnerable to a malicious JavaScript injection, which could allow attackers to access customer payment information. Which of the following mitigation strategies would be most effective for preventing an attack on the organization's web servers? (Choose two.)
The correct answer is A, D. Option A: Regularly updating server software and patches Option D: Utilizing a web-application firewall
Explanation
A firewall enforces traffic policy by permitting or blocking connections based on configured rules.
Which of the following tools is best for logging and monitoring in a cloud environment?
The correct answer is D. Option D: SIEM
Explanation
A SIEM centralizes and correlates security events to support detection, investigation, and reporting.
Showing questions 381–400 of 603 · Page 20 of 31