Page 6 of 31 · 603 total questions.
A security consultant needs secure, remote access to a client environment. Which of the following should the security consultant most likely use to gain access?
The correct answer is C. Option C: IPSec
Explanation
An intrusion prevention system detects and actively blocks malicious traffic inline. This option keeps traffic private / properly secured as required.
Which of the following should a systems administrator use to ensure an easy deployment of resources within the cloud provider?
The correct answer is B. Option B: Infrastructure as code
After a security awareness training session, a user called the IT help desk and reported a suspicious call. The suspicious caller stated that the Chief Financial Officer wanted credit card information in order to close an invoice. Which of the following topics did the user recognize from the training?
The correct answer is C. Option C: Social engineering This option keeps traffic private / properly secured as required.
A security administrator is deploying a DLP solution to prevent the exfiltration of sensitive customer data. Which of the following should the administrator do first?
The correct answer is C. Option C: Apply classifications to the data. This option keeps traffic private / properly secured as required.
An administrator assists the legal and compliance team with ensuring information about customer transactions is archived for the proper time period. Which of the following data policies is the administrator carrying out?
The correct answer is B. Option B: Retention
A company is working with a vendor to perform a penetration test. Which of the following includes an estimate about the number of hours required to complete the engagement?
The correct answer is A. Option A: SOW
A Chief Information Security Officer (CISO) wants to explicitly raise awareness about the increase of ransomware-as-a-service in a report to the management team. Which of the following best describes the threat actor in the CISO’s report?
The correct answer is D. Option D: Organized crime This option keeps traffic private / properly secured as required.
Which of the following practices would be best to prevent an insider from introducing malicious code into a company's development process?
The correct answer is D. Option D: Peer review and approval
Which of the following can best protect against an employee inadvertently installing malware on a company system?
The correct answer is D. Option D: Application allow list
A company is adding a clause to its AUP that states employees are not allowed to modify the operating system on mobile devices. Which of the following vulnerabilities is the organization addressing?
The correct answer is C. Option C: Jailbreaking
Which of the following would be the best ways to ensure only authorized personnel can access a secure facility? (Choose two.)
The correct answer is C, D. Option C: Badge access Option D: Access control vestibule This option keeps traffic private / properly secured as required.
An organization would like to store customer data on a separate part of the network that is not accessible to users on the main corporate network. Which of the following should the administrator use to accomplish this goal?
The correct answer is A. Option A: Segmentation
Which of the following is the most common data loss path for an air-gapped network?
The correct answer is D. Option D: Removable devices
Malware spread across a company's network after an employee visited a compromised industry blog. Which of the following best describes this type of attack?
The correct answer is C. Option C: Watering-hole
An organization is struggling with scaling issues on its VPN concentrator and internet circuit due to remote work. The organization is looking for a software solution that will allow it to reduce traffic on the VPN and internet circuit, while still providing encrypted tunnel access to the data center and monitoring of remote employee internet traffic. Which of the following will help achieve these objectives?
The correct answer is A. Option A: Deploying a SASE solution to remote employees This option keeps traffic private / properly secured as required.
Which of the following is the best reason to complete an audit in a banking environment?
The correct answer is A. Option A: Regulatory requirement
Which of the following security concepts is the best reason for permissions on a human resources fileshare to follow the principle of least privilege?
The correct answer is C. Option C: Confidentiality This option keeps traffic private / properly secured as required.
Which of the following are cases in which an engineer should recommend the decommissioning of a network device? (Choose two.)
The correct answer is E, F. Option E: The device's encryption level cannot meet organizational standards. Option F: The device is unable to receive authorized updates.
Explanation
Encryption protects confidentiality by making data unreadable without the appropriate key.
A company is required to perform a risk assessment on an annual basis. Which of the following types of risk assessments does this requirement describe?
The correct answer is C. Option C: Recurring
After a recent ransomware attack on a company's system, an administrator reviewed the log files. Which of the following control types did the administrator use?
The correct answer is B. Option B: Detective
Showing questions 101–120 of 603 · Page 6 of 31