Page 23 of 31 · 603 total questions.
Which of the following would a security administrator use to comply with a secure baseline during a patch update?
The correct answer is C. Option C: Standard operating procedure This option keeps traffic private / properly secured as required.
A malicious actor conducted a brute-force attack on a company's web servers and eventually gained access to the company's customer information database. Which of the following is the most effective way to prevent similar attacks?
The correct answer is C. Option C: Multifactor authentication
Explanation
Multifactor authentication requires independent evidence categories, reducing risk from a stolen password.
Which of the following options will provide the lowest RTO and RPO for a database?
The correct answer is D. Option D: Hot site
Which of the following is a possible consequence of a VM escape?
The correct answer is B. Option B: An attacker can access the hypervisor and compromise other VMs.
Explanation
A hypervisor creates and manages virtual machines while allocating underlying hardware resources.
A security team at a large, global company needs to reduce the cost of storing data used for performing investigations. Which of the following types of data should have its retention length reduced?
The correct answer is A. Option A: Packet capture This option keeps traffic private / properly secured as required.
Which of the following is a type of vulnerability that involves inserting scripts into web-based applications in order to take control of the client's web browser?
The correct answer is B. Option B: Cross-site scripting
Explanation
Cross-site scripting injects untrusted script into browser-rendered content and is mitigated with output encoding and content controls.
While investigating a possible incident, a security analyst discovers the following: Which of the following should the analyst do first?
The correct answer is D. Option D: Check the users table for new accounts. This option keeps traffic private / properly secured as required.
Due to a cyberattack, a company's IT systems were not operational for an extended period of time. The company wants to measure how quickly the systems must be restored in order to minimize business disruption. Which of the following would the company most likely use?
The correct answer is D. Option D: Recovery time objective
Which of the following actors attacking an organization is the most likely to be motivated by personal beliefs?
The correct answer is C. Option C: Hacktivist
Which of the following should a security team use to document persistent vulnerabilities with related recommendations?
The correct answer is B. Option B: Risk register This option keeps traffic private / properly secured as required.
An organization purchased a critical business application containing sensitive data. The organization would like to ensure that the application is not exploited by common data exfiltration attacks. Which of the following approaches would best help to fulfill this requirement?
The correct answer is B. Option B: WAF
A company wants to improve the availability of its application with a solution that requires minimal effort in the event a server needs to be replaced or added. Which of the following would be the best solution to meet these objectives?
The correct answer is A. Option A: Load balancing This option is the most fully managed / serverless choice, so it meets the requirement for the least operational overhead.
A company is performing a risk assessment on new software the company plans to use. Which of the following should the company assess during this process?
The correct answer is A. Option A: Software vulnerabilities
A malicious actor is trying to access sensitive financial information from a company's database by intercepting and reusing log-in credentials. Which of the following attacks is the malicious actor attempting?
The correct answer is B. Option B: On-path
A new employee accessed an unauthorized website. An investigation found that the employee violated the company's rules. Which of the following did the employee violate?
The correct answer is B. Option B: AUP
A systems administrator is reviewing the VPN logs and notices that during non-working hours a user is accessing the company file server and information is being transferred to a suspicious IP address. Which of the following threats is most likely occurring?
The correct answer is C. Option C: Data exfiltration
A company discovers suspicious transactions that were entered into the company's database and attached to a user account that was created as a trap for malicious activity. Which of the following is the user account an example of?
The correct answer is A. Option A: Honeytoken
A network engineer is increasing the overall security of network devices and needs to harden the devices. Which of the following will best accomplish this task?
The correct answer is C. Option C: Replacing Telnet with SSH This option keeps traffic private / properly secured as required.
A company's accounting department receives an urgent payment message from the company's bank domain with instructions to wire transfer funds. The sender requests that the transfer be completed as soon as possible. Which of the following attacks is described?
The correct answer is A. Option A: Business email compromise
A company filed a complaint with its IT service provider after the company discovered the service provider's external audit team had access to some of the company's confidential information. Which of the following is the most likely reason the company filed the complaint?
The correct answer is D. Option D: A required NDA had not been signed.
Showing questions 441–460 of 603 · Page 23 of 31