Page 24 of 31 · 603 total questions.
Which of the following aspects of the data management life cycle is most directly impacted by local and international regulations?
The correct answer is C. Option C: Retention
An analyst is reviewing job postings to ensure sensitive company information is not being shared with the general public. Which of the following is the analyst most likely looking for?
The correct answer is B. Option B: Software versions
An engineer has ensured that the switches are using the latest OS, the servers have the latest patches, and the endpoints' definitions are up to date. Which of the following will these actions most effectively prevent?
The correct answer is D. Option D: Known exploits
Which of the following is most likely a security concern when installing and using low-cost IoT devices in infrastructure environments?
The correct answer is D. Option D: Storage of data This option keeps traffic private / properly secured as required.
A company captures log-in details and reviews them each week to identify conditions such as excessive log-in attempts and frequent lockouts. Which of the following should a security analyst recommend to improve security compliance monitoring?
The correct answer is B. Option B: Adding automated alerting when anomalies occur This option keeps traffic private / properly secured as required.
A security team is in the process of hardening the network against externally crafted malicious packets. Which of the following is the most secure method to protect the internal network?
The correct answer is C. Option C: Intrusion prevention systems This option keeps traffic private / properly secured as required.
Which of the following is the best way to prevent an unauthorized user from plugging a laptop into an employee's phone network port and then using tools to scan for database servers?
The correct answer is A. Option A: MAC filtering
Which of the following should a systems administrator use to decrease the company's hardware attack surface?
The correct answer is D. Option D: Virtualization
A company wants to add an MFA solution for all employees who access the corporate network remotely. Log-in requirements include something you know, are, and have. The company wants a solution that does not require purchasing third-party applications or specialized hardware. Which of the following MFA solutions would best meet the company's requirements?
The correct answer is D. Option D: Mobile application-generated, one-time passcode with facial recognition
A company is using a legacy FTP server to transfer financial data to a third party. The legacy system does not support SFTP, so a compensating control is needed to protect the sensitive, financial data in transit. Which of the following would be the most appropriate for the company to use?
The correct answer is B. Option B: SSH tunneling
A security manager wants to reduce the number of steps required to identify and contain basic threats. Which of the following will help achieve this goal?
The correct answer is A. Option A: SOAR This option keeps traffic private / properly secured as required.
The Chief Information Officer (CIO) asked a vendor to provide documentation detailing the specific objectives within the compliance framework that the vendor's services meet. The vendor provided a report and a signed letter stating that the services meet 17 of the 21 objectives. Which of the following did the vendor provide to the CIO?
The correct answer is C. Option C: Attestation of compliance
Which of the following describes the most effective way to address OS vulnerabilities after they are identified?
The correct answer is D. Option D: Patching
The management team reports that employees are missing features on company-provided tablets, which is causing productivity issues. The management team directs the IT team to resolve the issue within 48 hours. Which of the following would be the best solution for the IT team to leverage in this scenario?
The correct answer is C. Option C: MDM
A company is implementing a policy to allow employees to use their personal equipment for work. However, the company wants to ensure that only company-approved applications can be installed. Which of the following addresses this concern?
The correct answer is A. Option A: MDM
An alert references attacks associated with a zero-day exploit. An analyst places a bastion host in the network to reduce the risk of the exploit. Which of the following types of controls is the analyst implementing?
The correct answer is A. Option A: Compensating
A penetration test has demonstrated that domain administrator accounts were vulnerable to pass-the-hash attacks. Which of the following would have been the best strategy to prevent the threat actor from using domain administrator accounts?
The correct answer is B. Option B: Implement a privileged access management solution.
Which of the following is an example of memory injection?
The correct answer is C. Option C: Malicious code is copied to the allocated space of an already running process.
A security administrator is implementing encryption on all hard drives in an organization. Which of the following security concepts is the administrator applying?
The correct answer is D. Option D: Confidentiality This option keeps traffic private / properly secured as required.
An administrator has configured a quarantine subnet for all guest devices that connect to the network. Which of the following would be best for the security team to perform before allowing access to corporate resources?
The correct answer is B. Option B: Compliance attestation This option keeps traffic private / properly secured as required.
Showing questions 461–480 of 603 · Page 24 of 31