Page 3 of 20 · 393 total questions.
A web application server is running a legacy operating system with an unpatched RCE vulnerability. The server cannot be upgraded until the corresponding application code is changed. Which of the following compensating controls would best prevent successful exploitation?
The correct answer is A. Option A: Segmentation
Which of the following is the reason why security engineers often cannot upgrade the security of embedded facility automation systems?
The correct answer is A. Option A: They are constrained by available compute. This option keeps traffic private / properly secured as required.
A security analyst identified a vulnerable and deprecated runtime engine that Is supporting a public-facing banking application. The developers anticipate the transition to modern development environments will take at least a month. Which of the following controls would best mitigate the risk without interrupting the service during the transition?
The correct answer is D. Option D: Configuring IPS and WAF with signatures
Explanation
An intrusion prevention system detects and actively blocks malicious traffic inline. Network address translation maps addresses between networks and commonly lets private hosts share public connectivity. This option keeps traffic private / properly secured as required.
A security architect wants to ensure a remote host's identity and decides that pinning the X.509 certificate to the device is the most effective solution. Which of the following must happen first?
The correct answer is C. Option C: Use an out-of-band method to obtain the certificate.
Explanation
A certificate binds a public key to an identity through a trusted certificate authority. This option keeps traffic private / properly secured as required.
A company hired a third-party consultant to run a cybersecurity incident simulation in order to identify security gaps and prepare stakeholders for a potential incident. Which of the following best describes this activity?
The correct answer is A. Option A: Tabletop exercise This option keeps traffic private / properly secured as required.
A security officer is requiring all personnel working on a special project to obtain a security clearance requisite with the level of all information being accessed. Data on this network must be protected at the same level of each clearance holder. The need to know must be verified by the data owner. Which of the following should the security officer do to meet these requirements?
The correct answer is B. Option B: Assign labels to the files and require formal access authorization. This option keeps traffic private / properly secured as required.
A security team receives alerts regarding impossible travel and possible brute-force attacks after normal business hours. After reviewing more logs, the team determines that specific users were targeted and attempts were made to transfer data to an unknown site. Which of the following should the team do to help mitigate these issues?
The correct answer is B. Option B: Restrict uploading activity to only authorized sites. This option keeps traffic private / properly secured as required.
A company recently acquired a SaaS company and performed a gap analysis. The results of the gap analysis Indicate security controls are absent throughout the SDLC and have led to several vulnerable production releases. Which of the following security tools best reduces the risk of vulnerable code being pushed to production in the future?
The correct answer is A. Option A: Static application security testing This option keeps traffic private / properly secured as required.
Which of the following is the best reason for obtaining file hashes from a confiscated laptop?
The correct answer is B. Option B: To later validate the integrity of each file
A security analyst is using data provided from a recent penetration test to calculate CVSS scores to prioritize remediation. Which of the following metric groups would the analyst need to determine to get the overall scores? (Choose three.)
The correct answer is A, E, F. Option A: Temporal Option E: Base Option F: Environmental This option keeps traffic private / properly secured as required.
Which of the following describes how a risk assessment is performed when an organization has a critical vendor that provides multiple products?
The correct answer is A. Option A: At the individual product level
A security engineer is performing a vulnerability management scan on multihomed Linux systems. The engineer notices that the vulnerability count is high due to the fact that each vulnerability is multiplied by the number of NICs on each system. Which of the following should the engineer do to deduplicate the vulnerabilities and to associate the vulnerabilities with a particular host?
The correct answer is B. Option B: Deploy an agent. This option keeps traffic private / properly secured as required.
Which of the following best describes a risk associated with using facial recognition to locally authenticate to a mobile device?
The correct answer is D. Option D: Biometric impersonation
Explanation
Network address translation maps addresses between networks and commonly lets private hosts share public connectivity.
The principal security analyst for a global manufacturer is investigating a security incident related to abnormal behavior in the ICS network. A controller was restarted as part of the troubleshooting process, and the following issue was identified when the controller was restarted: SECURE BOOT FAILED: FIRMWARE MISMATCH EXPECTED UXFDC479 ACTUAL 0x79F31B During the investigation, this modified firmware version was identified on several other controllers at the site. The official vendor firmware versions do not have this checksum. Which of the following stages of the MITRE ATT&CK framework for ICS includes this technique?
The correct answer is B. Option B: Persistence This option keeps traffic private / properly secured as required.
A web service provider has just taken on a very large contract that comes with requirements that are currently not being implemented. In order to meet contractual requirements, the company must achieve the following thresholds: 99.99% uptime Load time in 3 seconds - Response time = <1.0 seconds - Starting with the computing environment, which of the following should a security engineer recommend to best meet the requirements? (Choose three.)
The correct answer is B, C, D. Option B: Deploying a content delivery network Option C: Implementing server clusters Option D: Employing bare-metal loading of applications This option keeps traffic private / properly secured as required.
An analyst is working to address a potential compromise of a corporate endpoint and discovers the attacker accessed a user's credentials. However, it is unclear if the system baseline was modified to achieve persistence. Which of the following would most likely support forensic activities in this scenario?
The correct answer is B. Option B: Bit-level disk duplication
A company is decommissioning old servers and hard drives that contain sensitive data. Which of the following best protects against data leakage?
The correct answer is C. Option C: Shredding
An engineer has had scaling issues with a web application hosted on premises and would like to move to a serverless architecture. Which of the following cloud benefits would be best to utilize for this project?
The correct answer is B. Option B: Automation of resource provisioning
An organization needs to classify its systems and data in accordance with external requirements. Which of the following roles is best qualified to perform this task?
The correct answer is B. Option B: Data owner
A company is developing an application that will be used to perform e-commerce transactions for a subscription-based service. The application must be able to use previously saved payment methods to perform recurring transactions. Which of the following is the most appropriate?
The correct answer is A. Option A: Tokenization through an HSM
Showing questions 41–60 of 393 · Page 3 of 20