Page 21 of 31 · 603 total questions.
During a SQL update of a database, a temporary field that was created was replaced by an attacker in order to allow access to the system. Which of the following best describes this type of vulnerability?
The correct answer is A. Option A: Race condition
A group of developers has a shared backup account to access the source code repository. Which of the following is best way to secure the backup account if there is an SSO failure?
The correct answer is D. Option D: PAM This option keeps traffic private / properly secured as required.
Which of the following elements of digital forensics should a company use if it needs to ensure the integrity of evidence?
The correct answer is A. Option A: Preservation
A company suffered a critical incident where 30GB of data was exfiltrated from the corporate network. Which of the following actions is the most efficient way to identify where the system data was exfiltrated from and what location the attacker sent the data to?
The correct answer is A. Option A: Analyze firewall and network logs for large amounts of outbound traffic to external IP addresses or domains.
Explanation
A firewall enforces traffic policy by permitting or blocking connections based on configured rules.
Which of the following describes the procedures a penetration tester must follow while conducting a test?
The correct answer is A. Option A: Rules of engagement
A security analyst wants to better understand the behavior of users and devices in order to gain visibility into potential malicious activities. The analyst needs a control to detect when actions deviate from a common baseline. Which of the following should the analyst use?
The correct answer is C. Option C: Endpoint detection and response This option keeps traffic private / properly secured as required.
A legal department must maintain a backup from all devices that have been shredded and recycled by a third party. Which of the following best describes this requirement?
The correct answer is A. Option A: Data retention
Which of the following can be used to compromise a system that is running an RTOS?
The correct answer is B. Option B: Memory injection
Which of the following threat actors would most likely deface the website of a high-profile music group?
The correct answer is A. Option A: Unskilled attacker
A security architect wants to prevent employees from receiving malicious attachments by email. Which of the following functions should the chosen solution do?
The correct answer is C. Option C: Scan email traffic inline. This option keeps traffic private / properly secured as required.
Which of the following activities is the first stage in the incident response process?
The correct answer is A. Option A: Detection
Which of the following is the main consideration when a legacy system that is a critical part of a company's infrastructure cannot be replaced?
The correct answer is C. Option C: Single point of failure
Which of the following is a compensating control for providing user access to a high-risk website?
The correct answer is A. Option A: Enabling threat prevention features on the firewall
Explanation
A firewall enforces traffic policy by permitting or blocking connections based on configured rules.
An organization is implementing a COPE mobile device management policy. Which of the following should the organization include in the COPE policy? (Choose two.)
The correct answer is A, B. Option A: Remote wiping of the device Option B: Data encryption
Explanation
Encryption protects confidentiality by making data unreadable without the appropriate key.
A security administrator observed the following in a web server log while investigating an incident: "GET ../../../../etc/passwd" Which of the following attacks did the security administrator most likely see?
The correct answer is D. Option D: Directory traversal This option keeps traffic private / properly secured as required.
An organization wants a third-party vendor to do a penetration test that targets a specific device. The organization has provided basic information about the device. Which of the following best describes this kind of penetration test?
The correct answer is A. Option A: Partially known environment
Which of the following should a security team do first before a new web server goes live?
The correct answer is A. Option A: Harden the virtual host. This option keeps traffic private / properly secured as required.
Which of the following techniques can be used to sanitize the data contained on a hard drive while allowing for the hard drive to be repurposed?
The correct answer is D. Option D: Wipe tool
An attacker submits a request containing unexpected characters in an attempt to gain unauthorized access to information within the underlying systems. Which of the following best describes this attack?
The correct answer is D. Option D: SQL injection
Explanation
SQL injection manipulates database queries through untrusted input and is mitigated with parameterized statements.
A security analyst has determined that a security breach would have a financial impact of $15,000 and is expected to occur twice within a three-year period. Which of the following is the ALE for this risk?
The correct answer is B. Option B: $10,000 This option keeps traffic private / properly secured as required.
Showing questions 401–420 of 603 · Page 21 of 31