Page 25 of 31 · 603 total questions.
A customer has a contract with a CSP and wants to identify which controls should be implemented in the IaaS enclave. Which of the following is most likely to contain this information?
The correct answer is B. Option B: Responsibility matrix
A Chief Information Security Officer is developing procedures to guide detective and corrective activities associated with common threats, including phishing, social engineering, and business email compromise. Which of the following documents would be most relevant to revise as part of this process?
The correct answer is B. Option B: IRP This option keeps traffic private / properly secured as required.
Which of the following testing techniques uses both defensive and offensive testing methodologies with developers to securely build key applications and software?
The correct answer is B. Option B: Yellow This option keeps traffic private / properly secured as required.
An administrator wants to automate an account permissions update for a large number of accounts. Which of the following would best accomplish this task?
The correct answer is A. Option A: Security groups
Which of the following is the fastest and most cost-effective way to confirm a third-party supplier's compliance with security obligations?
The correct answer is A. Option A: Attestation report This option delivers the requirement at the lowest cost.
Various company stakeholders meet to discuss roles and responsibilities in the event of a security breach that would affect offshore offices. Which of the following is this an example of?
The correct answer is A. Option A: Tabletop exercise This option keeps traffic private / properly secured as required.
Which of the following is an example of a data protection strategy that uses tokenization?
The correct answer is B. Option B: Replacing sensitive data with surrogate values
Which of the following is a type of vulnerability that refers to the unauthorized installation of applications on a device through means other than the official application store?
The correct answer is D. Option D: Side loading
Which of the following types of identification methods can be performed on a deployed application during runtime?
The correct answer is A. Option A: Dynamic analysis
Which of the following cryptographic solutions is used to hide the fact that communication is occurring?
The correct answer is A. Option A: Steganography
Which of the following steps should be taken before mitigating a vulnerability in a production server?
The correct answer is D. Option D: Refer to the change management policy.
A security engineer needs to quickly identify a signature from a known malicious file. Which of the following analysis methods would the security engineer most likely use?
The correct answer is A. Option A: Static This option keeps traffic private / properly secured as required.
Which of the following should a company use to provide proof of external network security testing?
The correct answer is D. Option D: Third-party attestation This option keeps traffic private / properly secured as required.
A security administrator is addressing an issue with a legacy system that communicates data using an unencrypted protocol to transfer sensitive data to a third party. No software updates that use an encrypted protocol are available, so a compensating control is needed. Which of the following are the most appropriate for the administrator to suggest? (Choose two.)
The correct answer is C, D. Option C: SSH tunneling Option D: Segmentation This option keeps traffic private / properly secured as required.
Which of the following steps in the risk management process involves establishing the scope and potential risks involved with a project?
The correct answer is B. Option B: Risk identification
A company's website is www.company.com. Attackers purchased the domain www.c0mpany.com. Which of the following types of attacks describes this example?
The correct answer is A. Option A: Typosquatting
Which of the following allows a systems administrator to tune permissions for a file?
The correct answer is B. Option B: Access control list
Which of the following would be the greatest concern for a company that is aware of the consequences of non-compliance with government regulations?
The correct answer is B. Option B: Sanctions
Which of the following security concepts is accomplished when granting access after an individual has logged into a computer network?
The correct answer is A. Option A: Authorization This option keeps traffic private / properly secured as required.
A growing organization, which hosts an externally accessible application, adds multiple virtual servers to improve application performance and decrease the resource usage on individual servers. Which of the following solutions is the organization most likely to employ to further increase performance and availability?
The correct answer is A. Option A: Load balancer
Explanation
A load balancer distributes requests across healthy backends to improve scale and availability.
Showing questions 481–500 of 603 · Page 25 of 31