Page 9 of 31 · 603 total questions.
A systems administrator uses a key to encrypt a message being sent to a peer in a different branch office. The peer then uses the same key to decrypt the message. Which of the following describes this example?
The correct answer is A. Option A: Symmetric This option keeps traffic private / properly secured as required.
A visitor plugs a laptop into a network jack in the lobby and is able to connect to the company's network. Which of the following should be configured on the existing network infrastructure to best prevent this activity?
The correct answer is A. Option A: Port security
A security administrator is reissuing a former employee's laptop. Which of the following is the best combination of data handling activities for the administrator to perform? (Choose two.)
The correct answer is B, E. Option B: Certification Option E: Sanitization This option keeps traffic private / properly secured as required.
A systems administrator would like to deploy a change to a production system. Which of the following must the administrator submit to demonstrate that the system can be restored to a working state in the event of a performance issue?
The correct answer is A. Option A: Backout plan
A company is redesigning its infrastructure and wants to reduce the number of physical servers in use. Which of the following architectures is best suited for this goal?
The correct answer is C. Option C: Virtualization
A bank set up a new server that contains customers' PII. Which of the following should the bank use to make sure the sensitive data is not modified?
The correct answer is C. Option C: File integrity monitoring
Users at a company are reporting they are unable to access the URL for a new retail website because it is flagged as gambling and is being blocked. Which of the following changes would allow users to access the site?
The correct answer is D. Option D: Updating the categorization in the content filter
Which of the following most impacts an administrator's ability to address CVEs discovered on a server?
The correct answer is B. Option B: Patch availability
Which of the following describes effective change management procedures?
The correct answer is B. Option B: Having a backout plan when a patch fails
The CIRT is reviewing an incident that involved a human resources recruiter exfiltrating sensitive company data. The CIRT found that the recruiter was able to use HTTP over port 53 to upload documents to a web server. Which of the following security infrastructure devices could have identified and blocked this activity?
The correct answer is B. Option B: NGFW utilizing application inspection This option keeps traffic private / properly secured as required.
An enterprise is working with a third party and needs to allow access between the internal networks of both parties for a secure file migration. The solution needs to ensure encryption is applied to all traffic that is traversing the networks. Which of the following solutions should most likely be implemented?
The correct answer is B. Option B: IPSec
Explanation
An intrusion prevention system detects and actively blocks malicious traffic inline. This option keeps traffic private / properly secured as required.
An administrator has identified and fingerprinted specific files that will generate an alert if an attempt is made to email these files outside of the organization. Which of the following best describes the tool the administrator is using?
The correct answer is A. Option A: DLP
Explanation
Data loss prevention identifies sensitive data and prevents unauthorized disclosure or transfer.
A software developer released a new application and is distributing application files via the developer's website. Which of the following should the developer post on the website to allow users to verify the integrity of the downloaded files?
The correct answer is A. Option A: Hashes
An organization wants to limit potential impact to its log-in database in the event of a breach. Which of the following options is the security team most likely to recommend?
The correct answer is B. Option B: Hashing
Explanation
Hashing produces a one-way digest used to verify integrity without exposing the original value. This option keeps traffic private / properly secured as required.
An administrator finds that all user workstations and servers are displaying a message that is associated with files containing an extension of .ryk. Which of the following types of infections is present on the systems?
The correct answer is D. Option D: Ransomware
Explanation
Ransomware disrupts access by encrypting or stealing data; resilient backups, segmentation, and endpoint controls reduce impact.
A systems administrator is advised that an external web server is not functioning property. The administrator reviews the following firewall logs containing traffic going to the web server: Which of the following attacks is likely occurring?
The correct answer is A. Option A: DDoS
An organization would like to calculate the time needed to resolve a hardware issue with a server. Which of the following risk management processes describes this example?
The correct answer is D. Option D: Mean time to repair
A security engineer is installing an IPS to block signature-based attacks in the environment. Which of the following modes will best accomplish this task?
The correct answer is D. Option D: Active This option keeps traffic private / properly secured as required.
An IT manager is increasing the security capabilities of an organization after a data classification initiative determined that sensitive data could be exfiltrated from the environment. Which of the following solutions would mitigate the risk?
The correct answer is C. Option C: DLP
Explanation
Data loss prevention identifies sensitive data and prevents unauthorized disclosure or transfer. This option keeps traffic private / properly secured as required.
Which of the following is used to protect a computer from viruses, malware, and Trojans being installed and moving laterally across the network?
The correct answer is C. Option C: EDR
Explanation
Endpoint detection and response monitors endpoint activity and supports detection, containment, and investigation.
Showing questions 161–180 of 603 · Page 9 of 31