Page 8 of 31 · 603 total questions.
Which of the following would be the best way to handle a critical business application that is running on a legacy server?
The correct answer is A. Option A: Segmentation
Which of the following vulnerabilities is exploited when an attacker overwrites a register with a malicious address?
The correct answer is C. Option C: Buffer overflow
After a company was compromised, customers initiated a lawsuit. The company's attorneys have requested that the security team initiate a legal hold in response to the lawsuit. Which of the following describes the action the security team will most likely be required to take?
The correct answer is B. Option B: Retain any communications related to the security breach until further notice. This option keeps traffic private / properly secured as required.
Which of the following describes the process of concealing code or text inside a graphical image?
The correct answer is D. Option D: Steganography
An employee receives a text message from an unknown number claiming to be the company’s Chief Executive Officer and asking the employee to purchase several gift cards. Which of the following types of attacks does this describe?
The correct answer is B. Option B: Smishing
Which of the following risk management strategies should an enterprise adopt first if a legacy application is critical to business operations and there are preventative controls that are not yet implemented?
The correct answer is A. Option A: Mitigate
Visitors to a secured facility are required to check in with a photo ID and enter the facility through an access control vestibule. Which of the following best describes this form of security control?
The correct answer is A. Option A: Physical This option keeps traffic private / properly secured as required.
The local administrator account for a company's VPN appliance was unexpectedly used to log in to the remote management interface. Which of the following would have most likely prevented this from happening?
The correct answer is B. Option B: Changing the default password
Which of the following is the best way to secure an on-site data center against intrusion from an insider?
The correct answer is B. Option B: Access badge This option keeps traffic private / properly secured as required.
An engineer moved to another team and is unable to access the new team's shared folders while still being able to access the shared folders from the former team. After opening a ticket, the engineer discovers that the account was never moved to the new group. Which of the following access controls is most likely causing the lack of access?
The correct answer is A. Option A: Role-based
Which of the following factors are the most important to address when formulating a training curriculum plan for a security awareness program? (Choose two.)
The correct answer is C, E. Option C: Threat vectors based on the industry in which the organization operates Option E: Cadence and duration of training events This option keeps traffic private / properly secured as required.
A network administrator is working on a project to deploy a load balancer in the company's cloud environment. Which of the following fundamental security requirements does this project fulfil?
The correct answer is D. Option D: Availability This option keeps traffic private / properly secured as required.
A systems administrator is changing the password policy within an enterprise environment and wants this update implemented on all systems as quickly as possible. Which of the following operating system security measures will the administrator most likely use?
The correct answer is B. Option B: Pushing GPO update This option keeps traffic private / properly secured as required.
Which of the following would be most useful in determining whether the long-term cost to transfer a risk is less than the impact of the risk?
The correct answer is D. Option D: ALE
In order to strengthen a password and prevent a hacker from cracking it, a random string of 36 characters was added to the password. Which of the following best describes this technique?
The correct answer is D. Option D: Salting
Explanation
A unique random salt makes identical passwords produce different hashes and defeats precomputed hash tables.
A technician is deploying a new security camera. Which of the following should the technician do?
The correct answer is D. Option D: Conduct a site survey. This option keeps traffic private / properly secured as required.
A company is experiencing a web services outage on the public network. The services are up and available but inaccessible. The network logs show a sudden increase in network traffic that is causing the outage. Which of the following attacks is the organization experiencing?
The correct answer is D. Option D: DDoS
Which of the following threat actors is the most likely to be motivated by profit?
The correct answer is C. Option C: Organized crime
An organization experiences a cybersecurity incident involving a command-and-control server. Which of the following logs should be analyzed to identify the impacted host? (Choose two.)
The correct answer is D, E. Option D: Network Option E: Firewall
Explanation
A firewall enforces traffic policy by permitting or blocking connections based on configured rules. This option keeps traffic private / properly secured as required.
During a penetration test, a vendor attempts to enter an unauthorized area using an access badge. Which of the following types of tests does this represent?
The correct answer is D. Option D: Physical
Showing questions 141–160 of 603 · Page 8 of 31