السؤال #1

An organization is referencing NIST best practices for BCP creation while reviewing current internal organizational processes for mission-essential items. Which of the following phases establishes the identification and prioritization of critical systems and functions?

A. Review a recent gap analysis

B. Perform a cost-benefit analysis

C. Conduct a business impact analysis

D. Develop an exposure factor matrix

عرض الإجابة

اجابة صحيحة: D

السؤال #2

A Chief information Security Officer (CISO) is developing corrective-action plans based on the following from a vulnerability scan of internal hosts: Which of the following MOST appropriate corrective action to document for this finding?

A. The product owner should perform a business impact assessment regarding the ability to implement a WAF

B. The application developer should use a static code analysis tool to ensure any application code is not vulnerable to buffer overflows

C. The system administrator should evaluate dependencies and perform upgrade as necessary

D. The security operations center should develop a custom IDS rule to prevent attacks buffer overflows against this server

عرض الإجابة

اجابة صحيحة: C

السؤال #3

A disaster recovery team learned of several mistakes that were made during the last disaster recovery parallel test. Computational resources ran out at 70% of restoration of critical services. Which of the following should be modified to prevent the issue from reoccurring?

A. Recovery point objective

B. Recovery time objective

C. Mission-essential functions

D. Recovery service level

عرض الإجابة

اجابة صحيحة: B

السؤال #4

An organization is assessing the security posture of a new SaaS CRM system that handles sensitive PI I and identity information, such as passport numbers. The SaaS CRM system does not meet the organization's current security standards. The assessment identifies the following: 1) There will be a 520,000 per day revenue loss for each day the system is delayed going into production. 2) The inherent risk is high. 3) The residual risk is low. 4) There will be a staged deployment to the solution rollout to the co

A. Apply for a security exemption, as the risk is too high to accept

B. Transfer the risk to the SaaS CRM vendor, as the organization is using a cloud service

C. Accept the risk, as compensating controls have been implemented to manage the risk

D. Avoid the risk by accepting the shared responsibility model with the SaaS CRM provider

عرض الإجابة

اجابة صحيحة: A

السؤال #5

A small company needs to reduce its operating costs. vendors have proposed solutions, which all focus on management of the company’s website and services. The Chief information Security Officer (CISO) insist all available resources in the proposal must be dedicated, but managing a private cloud is not an option. Which of the following is the BEST solution for this company?

A. Community cloud service model

B. Multinency SaaS

C. Single-tenancy SaaS

D. On-premises cloud service model

عرض الإجابة

اجابة صحيحة: D

السؤال #6

Which of the following controls primarily detects abuse of privilege but does not prevent it?

A. Off-boarding

B. Separation of duties

C. Least privilege

D. Job rotation

عرض الإجابة

اجابة صحيحة: DE

السؤال #7

A company recently acquired a SaaS provider and needs to integrate its platform into the company's existing infrastructure without impact to the customer's experience. The SaaS provider does not have a mature security program A recent vulnerability scan of the SaaS provider's systems shows multiple critical vulnerabilities attributed to very old and outdated Oss. Which of the following solutions would prevent these vulnerabilities from being introduced into the company's existing infrastructure?

A. Segment the systems to reduce the attack surface if an attack occurs

B. Migrate the services to new systems with a supported and patched OS

C. Patch the systems to the latest versions of the existing OSs

D. Install anti-malwar

E. HIPS, and host-based firewalls on each of the systems

عرض الإجابة

اجابة صحيحة: C

السؤال #8

A security auditor needs to review the manner in which an entertainment device operates. The auditor is analyzing the output of a port scanning tool to determine the next steps in the security review. Given the following log output. The best option for the auditor to use NEXT is:

A. A SCAP assessment

B. Reverse engineering

C. Fuzzing

D. Network interception

عرض الإجابة

اجابة صحيحة: B

السؤال #9

An organization is establishing a new software assurance program to vet applications before they are introduced into the production environment, Unfortunately. many Of the applications are provided only as compiled binaries. Which Of the following should the organization use to analyze these applications? (Select TWO).

A. Regression testing

B. SAST

C. Third-party dependency management

D. IDE SAST

E. Fuzz testing

F. IAST

عرض الإجابة

اجابة صحيحة: D

السؤال #10

An attacker infiltrated the code base of a hardware manufacturer and inserted malware before the code was compiled. The malicious code is now running at the hardware level across a number of industries and sectors. Which of the following categories BEST describes this type of vendor risk?

A. SDLC attack

B. Side-load attack

C. Remote code signing

D. Supply chain attack

عرض الإجابة

اجابة صحيحة: D

السؤال #11

A security engineer needs 10 implement a CASB to secure employee user web traffic. A Key requirement is mat relevant event data must be collected from existing on-premises infrastructure components and consumed by me CASB to expand traffic visibility. The solution must be nighty resilient to network outages. Which of the following architectural components would BEST meet these requirements?

A. Log collection

B. Reverse proxy

C. AWAF

D. API mode

عرض الإجابة

اجابة صحيحة: A

السؤال #12

A technician is reviewing the logs and notices a large number of files were transferred to remote sites over the course of three months. This activity then stopped. The files were transferred via TLSprotected HTTP sessions from systems that do not send traffic to those sites. The technician will define this threat as:

A. a decrypting RSA using obsolete and weakened encryption attack

B. a zero-day attack

C. an advanced persistent threat

D. an on-path attack

عرض الإجابة

اجابة صحيحة: A

السؤال #13

A bank is working with a security architect to find the BEST solution to detect database management system compromises. The solution should meet the following requirements: Work at the application layer Send alerts on attacks from both privileged and malicious users Have a very low false positive Which of the following should the architect recommend?

A. FIM

B. WAF

C. NIPS

D. DAM

E. UTM

عرض الإجابة

اجابة صحيحة: C

السؤال #14

A vulnerability scanner detected an obsolete version of an open-source file-sharing application on one of a company’s Linux servers. While the software version is no longer supported by the OSS community, the company’s Linux vendor backported fixes, applied them for all current vulnerabilities, and agrees to support the software in the future. Based on this agreement, this finding is BEST categorized as a:

A. true positive

B. true negative

C. false positive

D. false negative

عرض الإجابة

اجابة صحيحة: A

السؤال #15

An organization developed a social media application that is used by customers in multiple remote geographic locations around the world. The organization’s headquarters and only datacenter are located in New York City. The Chief Information Security Officer wants to ensure the following requirements are met for the social media application: Low latency for all mobile users to improve the users’ experience SSL offloading to improve web server performance Protection against DoS and DDoS attacks High availabil

A. A cache server farm in its datacenter

B. A load-balanced group of reverse proxy servers with SSL acceleration

C. A CDN with the origin set to its datacenter

D. Dual gigabit-speed Internet connections with managed DDoS prevention

عرض الإجابة

اجابة صحيحة: D

السؤال #16

A shipping company that is trying to eliminate entire classes of threats is developing an SELinux policy to ensure its custom Android devices are used exclusively for package tracking. After compiling and implementing the policy, in which of the following modes must the company ensure the devices are configured to run?

A. Protecting

B. Permissive

C. Enforcing

D. Mandatory

عرض الإجابة

اجابة صحيحة: A

السؤال #17

A company just released a new video card. Due to limited supply and nigh demand, attackers are employing automated systems to purchase the device through the company's web store so they can resell it on the secondary market. The company's Intended customers are frustrated. A security engineer suggests implementing a CAPTCHA system on the web store to help reduce the number of video cards purchased through automated systems. Which of the following now describes the level of risk?

A. Inherent Low

B. Mitigated

C. Residual

D. Transferred

عرض الإجابة

اجابة صحيحة: D

السؤال #18

An engineering team is developing and deploying a fleet of mobile devices to be used for specialized inventory management purposes. These devices should: * Be based on open-source Android for user familiarity and ease. * Provide a single application for inventory management of physical assets. * Permit use of the camera be only the inventory application for the purposes of scanning * Disallow any and all configuration baseline modifications. * Restrict all access to any device resource other than those requ

A. Set an application wrapping policy, wrap the application, distributes the inventory APK via the MAM tool, and test the application restrictions

B. Write a MAC sepolicy that defines domains with rules, label the inventory application, build the policy, and set to enforcing mode

C. Swap out Android Linux kernel version for >2,4,0, but the internet build Android, remove unnecessary functions via MDL, configure to block network access, and perform integration testing

D. Build and install an Android middleware policy with requirements added, copy the file into/ user/init, and then built the inventory application

عرض الإجابة

اجابة صحيحة: B

السؤال #19

The goal of a Chief information Security Officer (CISO) providing up-to-date metrics to a bank’s risk committee is to ensure:

A. Budgeting for cybersecurity increases year over year

B. The committee knows how much work is being done

C. Business units are responsible for their own mitigation

D. The bank is aware of the status of cybersecurity risks

عرض الإجابة

اجابة صحيحة: A

السؤال #20

A security analyst is reviewing the following vulnerability assessment report: Which of the following should be patched FIRST to minimize attacks against Internet-facing hosts?

A. Server1

B. Server2

C. Server 3

D. Servers

عرض الإجابة

اجابة صحيحة: D

السؤال #21

While investigating a security event, an analyst finds evidence that a user opened an email attachment from an unknown source. Shortly after the user opened the attachment, a group of servers experienced a large amount of network and resource activity. Upon investigating the servers, the analyst discovers the servers were encrypted by ransomware that is demanding payment within 48 hours or all data will be destroyed. The company has no response plans for ransomware. Which of the following is the NEXT step t

A. Pay the ransom within 48 hours

B. Isolate the servers to prevent the spread

C. Notify law enforcement

D. Request that the affected servers be restored immediately

عرض الإجابة

اجابة صحيحة: C

السؤال #22

A Chief Information Officer is considering migrating all company data to the cloud to save money on expensive SAN storage. Which of the following is a security concern that will MOST likely need to be addressed during migration?

A. Latency

B. Data exposure

C. Data loss

D. Data dispersion

عرض الإجابة

اجابة صحيحة: A

السؤال #23

A company wants to protect its intellectual property from theft. The company has already applied ACLs and DACs. Which of the following should the company use to prevent data theft?

A. Watermarking

B. DRM

C. NDA

D. Access logging

عرض الإجابة

اجابة صحيحة: B

السؤال #24

A security analyst is concerned that a malicious piece of code was downloaded on a Linux system. After some research, the analyst determines that the suspected piece of code is performing a lot of input/output (I/O) on the disk drive. Based on the output above, from which of the following process IDs can the analyst begin an investigation?

A. 65

B. 77

C. 83

D. 87

عرض الإجابة

اجابة صحيحة: C

السؤال #25

An organization is developing a disaster recovery plan that requires data to be backed up and available at a moment’s notice. Which of the following should the organization consider FIRST to address this requirement?

A. Implement a change management plan to ensure systems are using the appropriate versions

B. Hire additional on-call staff to be deployed if an event occurs

C. Design an appropriate warm site for business continuity

D. Identify critical business processes and determine associated software and hardware requirements

عرض الإجابة

اجابة صحيحة: A

السؤال #26

A software development company makes Its software version available to customers from a web portal. On several occasions, hackers were able to access the software repository to change the package that is automatically published on the website. Which of the following would be the BEST technique to ensure the software the users download is the official software released by the company?

A. Distribute the software via a third-party repository

B. Close the web repository and deliver the software via email

C. Email the software link to all customers

D. Display the SHA checksum on the website

عرض الإجابة

اجابة صحيحة: D

السؤال #27

A threat analyst notices the following URL while going through the HTTP logs. Which of the following attack types is the threat analyst seeing?

A. SQL injection

B. CSRF

C. Session hijacking

D. XSS

عرض الإجابة

اجابة صحيحة: A

السؤال #28

A review of the past year’s attack patterns shows that attackers stopped reconnaissance after finding a susceptible system to compromise. The company would like to find a way to use this information to protect the environment while still gaining valuable attack information. Which of the following would be BEST for the company to implement?

A. A WAF

B. An IDS

C. A SIEM

D. A honeypot

عرض الإجابة

اجابة صحيحة: BC

السؤال #29

A security compliance requirement states that specific environments that handle sensitive data must be protected by need-to-know restrictions and can only connect to authorized endpoints. The requirement also states that a DLP solution within the environment must be used to control the data from leaving the environment. Which of the following should be implemented for privileged users so they can support the environment from their workstations while remaining compliant?

A. NAC to control authorized endpoints

B. FIM on the servers storing the data

C. A jump box in the screened subnet

D. A general VPN solution to the primary network

عرض الإجابة

اجابة صحيحة: C

السؤال #30

A financial services company wants to migrate its email services from on-premises servers to a cloud-based email solution. The Chief information Security Officer (CISO) must brief board of directors on the potential security concerns related to this migration. The board is concerned about the following. * Transactions being required by unauthorized individual * Complete discretion regarding client names, account numbers, and investment information. * Malicious attacker using email to distribute malware and

A. Data loss prevention

B. Endpoint detection response

C. SSL VPN

D. Application whitelisting

عرض الإجابة

اجابة صحيحة: D

السؤال #31

A DevOps team has deployed databases, event-driven services, and an API gateway as PaaS solution that will support a new billing system. Which of the following security responsibilities will the DevOps team need to perform?

A. Securely configure the authentication mechanisms

B. Patch the infrastructure at the operating system

C. Execute port scanning against the services

D. Upgrade the service as part of life-cycle management

عرض الإجابة

اجابة صحيحة: AD

السؤال #32

A small business would like to provide guests who are using mobile devices encrypted WPA3 access without first distributing PSKs or other credentials. Which of the following features will enable the business to meet this objective?

A. Simultaneous Authentication of Equals

B. Enhanced open

C. Perfect forward secrecy

D. Extensible Authentication Protocol

عرض الإجابة

اجابة صحيحة: A

السؤال #33

A Chief Information Officer (CIO) wants to implement a cloud solution that will satisfy the following requirements: Support all phases of the SDLC. Use tailored website portal software. Allow the company to build and use its own gateway software. Utilize its own data management platform. Continue using agent-based security tools. Which of the following cloud-computing models should the CIO implement?

A. SaaS

B. PaaS

C. MaaS

D. IaaS

عرض الإجابة

اجابة صحيحة: A

السؤال #34

A security analyst is reading the results of a successful exploit that was recently conducted by third-party penetration testers. The testers reverse engineered a privileged executable. In the report, the planning and execution of the exploit is detailed using logs and outputs from the test However, the attack vector of the exploit is missing, making it harder to recommend remediation’s. Given the following output: The penetration testers MOST likely took advantage of:

A. A TOC/TOU vulnerability

B. A plain-text password disclosure

C. An integer overflow vulnerability

D. A buffer overflow vulnerability

عرض الإجابة

اجابة صحيحة: A

السؤال #35

A developer wants to develop a secure external-facing web application. The developer is looking for an online community that produces tools, methodologies, articles, and documentation in the field of web-application security Which of the following is the BEST option?

A. ICANN

B. PCI DSS

C. OWASP

D. CSA

E. NIST

عرض الإجابة

اجابة صحيحة: D

السؤال #36

Which of the following is required for an organization to meet the ISO 27018 standard?

A. All Pll must be encrypted

B. All network traffic must be inspected

C. GDPR equivalent standards must be met

D. COBIT equivalent standards must be met

عرض الإجابة

اجابة صحيحة: B

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان

عرض الإجابات بعد التقديم

لا تريد أن تفوت شيئا؟

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع! احصل الان

عرض الإجابات بعد التقديم

اجتياز اختبار الممارسة Cisco وPMP وCISA وCISM وAWS بنسبة 100% للبيع!
احصل الان