Page 22 of 31 · 603 total questions.
A systems administrator discovers a system that is no longer receiving support from the vendor. However, this system and its environment are critical to running the business, cannot be modified, and must stay online. Which of the following risk treatments is the most appropriate in this situation?
The correct answer is B. Option B: Accept
A company discovered its data was advertised for sale on the dark web. During the initial investigation, the company determined the data was proprietary data. Which of the following is the next step the company should take?
The correct answer is C. Option C: Notify the applicable parties of the breach.
Which of the following would be the best solution to deploy a low-cost standby site that includes hardware and internet access?
The correct answer is D. Option D: Warm site
An organization needs to determine how many employees are accessing the building each day in order to configure the proper access controls. Which of the following control types best meets this requirement?
The correct answer is A. Option A: Detective
An organization wants to implement a secure solution for remote users. The users handle sensitive PHI on a regular basis and need to access an internally developed corporate application. Which of the following best meet the organization's security requirements? (Choose two.)
The correct answer is E, F. Option E: MFA Option F: VPN
Explanation
Multifactor authentication combines independent authentication factors so one compromised credential is insufficient. A VPN creates an encrypted tunnel across an untrusted network for private remote or site connectivity. This option keeps traffic private / properly secured as required.
A security officer is implementing a security awareness program and is placing security-themed posters around the building and is assigning online user training. Which of the following would the security officer most likely implement?
The correct answer is C. Option C: Phishing campaign
Explanation
Phishing uses deceptive communication to obtain credentials, money, or execution of malicious content. This option keeps traffic private / properly secured as required.
A security consultant is working with a client that wants to physically isolate its secure systems. Which of the following best describes this architecture?
The correct answer is B. Option B: Air gapped This option keeps traffic private / properly secured as required.
A company is in the process of migrating to cloud-based services. The company’s IT department has limited resources for migration and ongoing support. Which of the following best meets the company’s needs?
The correct answer is C. Option C: SASE
An employee clicks a malicious link in an email that appears to be from the company's Chief Executive Officer. The employee's computer is infected with ransomware that encrypts the company's files. Which of the following is the most effective way for the company to prevent similar incidents in the future?
The correct answer is A. Option A: Security awareness training This option keeps traffic private / properly secured as required.
Which of the following types of vulnerabilities is primarily caused by improper use and management of cryptographic certificates?
The correct answer is A. Option A: Misconfiguration
Which of the following best describe the benefits of a microservices architecture when compared to a monolithic architecture? (Choose two.)
The correct answer is C, D. Option C: Improved scalability of the system Option D: Increased compartmentalization of the system
A user's workstation becomes unresponsive and displays a ransom note demanding payment to decrypt files. Before the attack, the user opened a resume they received in a message, browsed the company's website, and installed OS updates. Which of the following is the most likely vector of this attack?
The correct answer is A. Option A: Spear-phishing attachment
Explanation
Phishing uses deceptive communication to obtain credentials, money, or execution of malicious content.
A penetration tester finds an unused Ethernet port during an on-site penetration test. Upon plugging a device into the unused port, the penetration tester notices that the machine is assigned an IP address, allowing the tester to enumerate the local network. Which of the following should an administrator implement in order to prevent this situation from happening in the future?
The correct answer is A. Option A: Port security
Which of the following should be used to ensure an attacker is unable to read the contents of a mobile device's drive if the device is lost?
The correct answer is C. Option C: FDE
A security administrator documented the following records during an assessment of network services: Two weeks later, the administrator performed a log review and noticed the records were changed as follows: When consulting the service owner, the administrator validated that the new address was not part of the company network. Which of the following was the company most likely experiencing?
The correct answer is B. Option B: DNS poisoning
Explanation
DNS resolves host names to records such as IP addresses and service locations. DNS poisoning inserts false resolution data so users are redirected to an attacker-controlled destination. This option keeps traffic private / properly secured as required.
Which of the following is the primary reason why false negatives on a vulnerability scan should be a concern?
The correct answer is A. Option A: The system has vulnerabilities that are not being detected.
A company is concerned about theft of client data from decommissioned laptops. Which of the following is the most cost-effective method to decrease this risk?
The correct answer is A. Option A: Wiping This option delivers the requirement at the lowest cost.
A company that has a large IT operation is looking to better control, standardize, and lower the time required to build new servers. Which of the following architectures will best achieve the company’s objectives?
The correct answer is B. Option B: IaC
A government official receives a blank envelope containing photos and a note instructing the official to wire a large sum of money by midnight to prevent the photos from being leaked on the internet. Which of the following best describes the threat actor's intent?
The correct answer is D. Option D: Blackmail
Which of the following is the best security reason for closing service ports that are not needed?
The correct answer is C. Option C: To reduce a system's attack surface This option keeps traffic private / properly secured as required.
Showing questions 421–440 of 603 · Page 22 of 31