Page 19 of 20 Β· 393 total questions.
A companyβs engineers must ensure that it is difficult for competitors to determine how the companyβs software works. Which of the following techniques can help achieve this objective?
The correct answer is D. Option D: Stripping debug symbols
The accounts payable analyst receives a voicemail from the Chief Executive Officer (CEO), requesting that an invoice be paid. The voicemail provides wire transfer details that do not match the instructions on file. Which of the following is the most likely attack being employed?
The correct answer is A. Option A: Exploitation of a chatbot through prompt injection
As part of a security audit in the software development life cycle, a product manager must demonstrate and provide evidence of a complete representation of the code and modules used within the production-deployed application prior to the build. Which of the following best provides the required evidence?
The correct answer is B. Option B: Runtime application inspection This option keeps traffic private / properly secured as required.
During post-incident analysis of a recent website outage, an incident response team identifies the following commands that were run from a compromised internal machine: Which of the following should the team do?
The correct answer is A. Option A: Sinkhole suspicious DNS traffic
Explanation
DNS resolves host names to records such as IP addresses and service locations.
The Chief Information Security Officer (CISO) asks the security team whether their SOC is receiving IoCs from an industry ISAC Which of the following is the most likely reason the CISO is interested in obtaining this information?
The correct answer is A. Option A: To ensure the SOC is able to detect known attacks against similar organizations This option keeps traffic private / properly secured as required.
A security architect wants to integrate a new data source for its SOC team that meets the following requirements β’ Incident escalation should include specific data points β’ Clear remediation actions should be included for the incident response team β’ Timeliness and accuracy are the most important factors Which of the following is the best way to meet the architect's objective?
The correct answer is D. Option D: Industry threat feeds from the ISAC This option keeps traffic private / properly secured as required.
A security engineer receives the following findings from a recent security audit: β’ Data should be protected based on user permissions and roles β’ User action tracking should be implemented across the network β’ Digital identities should be validated across the data access workflow Which of the following is the first action the engineer should take to address the findings?
The correct answer is A. Option A: Implement continuous and context-based authentication and authorization This option keeps traffic private / properly secured as required.
A security engineer discovers that some workstations are trying to establish communication with an unknown domain. The engineer compiles the following information: Which of the following best describes this attack?
The correct answer is A. Option A: Fast flux This option keeps traffic private / properly secured as required.
An IT team receives reports from an employee who is experiencing account lockouts. The analyst sees brute-force attempts from countries where the company does not have offices. Which of the following solutions would best address this issue?
The correct answer is A. Option A: Using conditional access for user accounts
A security officer is receiving alerts from a cloud service provider about a new wave of phishing campaigns. To prepare employees, the cloud service provider advises the company to make announcements and develop basic security competence. Which of the following solutions best aligns with the cloud service providerβs advice?
The correct answer is C. Option C: Establishing a security awareness program This option keeps traffic private / properly secured as required.
A SOC engineer is designing a solution to automate a sequence of tasks in a timely manner with the least amount of effort. The following objectives must be met: β’ IOCs must be verified β’ Malicious domains must be blocked on all firewalls and email gateways β’ An email must be sent confirming the status of the operations Which of the following is the best way to achieve this goal?
The correct answer is B. Option B: Using a TAXII server to share STIX files This option is the most fully managed / serverless choice, so it meets the requirement for the least operational overhead.
An organization wants to implement a secure cloud architecture across all instances. Given the following requirements: β’ Establish a standard network template β’ Deployments must be consistent β’ Security policies must be able to be changed at scale Which of the following technologies meets these requirements?
The correct answer is C. Option C: Infrastructure as code This option keeps traffic private / properly secured as required.
A developer used their workstation to generate keys that are used to secure a mission-critical application. A security engineer needs to reduce the risk of unauthorized disclosure of keying material. Which of the following is the best way to increase the security of the process?
The correct answer is A. Option A: HSM This option keeps traffic private / properly secured as required.
Which of the following cryptographic techniques is the most resistant to quantum computing decryption attacks?
The correct answer is C. Option C: Lattice-based
A security consultant recommends that a solution be deployed to increase awareness of APTs throughout the IT and ΠΠ’ environments. The consultant's requirements state that the solution must: β’ Be capable of collecting data from both ΠΠ’ and IT protocols. β’ Operate within new microsegmented and air-gapped network architecture β’ Provide both correlation of events and retention of raw log data and incidents β’ Integrate with the ITSM platform and employee paging system Which of the following solutions best meets these requirements?
The correct answer is D. Option D: SIEM with remote collectors
Explanation
A SIEM centralizes and correlates security events to support detection, investigation, and reporting. This option keeps traffic private / properly secured as required.
A medical device manufacturer is establishing a risk management strategy for its devices Patient safety is its top concern. These devices automatically adapt to specific patient needs without human intervention and rely heavily on software. Which of the following is the most important risk factor to prioritize?
The correct answer is D. Option D: The reliability of connectivity to monitoring peripherals
A software analyst is conducting a forensic investigation. The analyst needs to differentiate between approved software components and those used within an application If used as part of the CI/CD pipeline, which of the following would most effectively help the analyst do this?
The correct answer is D. Option D: Code signing
An analyst is using the Diamond Model of Intrusion Analysis to identify the likely chain of activities associated with an attacker's activities. The threat hunter has completed the core components of the model but needs to consider meta factors to more deeply understand the situation. Which of the following should the threat hunter seek to understand within the model?
The correct answer is D. Option D: Infrastructure
The Chief Information Security Officer must ensure that an organization's baseline workload is standardized prior to deployment and any modifications are immediately returned to the approved configuration. Which of the following are the best ways to assist with meeting these goals? (Choose two.)
The correct answer is A, C. Option A: CNAPP Option C: IaC This option keeps traffic private / properly secured as required.
A cyber security architect seeks to improve vulnerability management and orchestrate a large number of vulnerability checks. Key constraints include: β’ There are 512 containerized microservices β’ Vulnerability data is sourced from multiple scanners β’ CIS baselines must be enforced β’ Scan activity must be scheduled. Which of the following automation workflows best meets this objective?
The correct answer is B. Option B: Deploying an XCCDF scanner This option keeps traffic private / properly secured as required.
Showing questions 361β380 of 393 Β· Page 19 of 20