NEW QUESTION 1
A company needs to centralize its logs to create a baseline and have visibility on its security events. Which of the following technologies will accomplish this objective?

• A. Security information and event management
• B. A web application firewall
• C. A vulnerability scanner
• D. A next-generation firewall

Answer: A

NEW QUESTION 2
An organization wants to implement a third factor to an existing multifactor authentication. The organization already uses a smart card and password. Which of the following would meet the organization’s needs for a third factor?

• A. Date of birth
• B. Fingerprints
• C. PIN
• D. TPM

Answer: B

NEW QUESTION 3
An organization that is located in a flood zone is MOST likely to document the concerns associated with the restoration of IT operation in a:

• A. business continuity plan
• B. communications plan.
• C. disaster recovery plan.
• D. continuity of operations plan

Answer: C

NEW QUESTION 4
A network engineer notices the VPN concentrator overloaded and crashes on days when there are a lot of remote workers. Senior management has placed greater importance on the availability of VPN resources for the remote workers than the security of the end users’ traffic. Which of the following would be BEST to solve this issue?

• A. iPSec
• B. Always On
• C. Split tunneling
• D. L2TP

Answer: B

NEW QUESTION 5
A company has determined that if its computer-based manufacturing is not functioning for 12 consecutive hours, it will lose more money that it costs to maintain the equipment. Which of the following must be less than 12 hours to maintain a positive total cost of ownership?

• A. MTBF
• B. RPO
• C. RTO
• D. MTTR

Answer: C

NEW QUESTION 6
A security engineer is setting up passwordless authentication for the first time. INSTRUCTIONS
Use the minimum set of commands to set this up and verify that it works. Commands cannot be reused.
If at any time you would like to bring back the initial state of the simulation, please click the Reset All button.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 7
The manager who is responsible for a data set has asked a security engineer to apply encryption to the data on a hard disk. The security engineer is an example of a:

• A. data controller.
• B. data owner
• C. data custodian.
• D. data processor

Answer: D

NEW QUESTION 8
After a ransomware attack a forensics company needs to review a cryptocurrency transaction between the victim and the attacker. Which of the following will the company MOST likely review to trace this transaction?

• A. The public ledger
• B. The NetFlow data
• C. A checksum
• D. The event log

Answer: A

NEW QUESTION 9
A critical file server is being upgraded and the systems administrator must determine which RAID level the new server will need to achieve parity and handle two simultaneous disk failures. Which of the following RAID levels meets this requirements?

• A. RAID 0+1
• B. RAID 2
• C. RAID 5
• D. RAID 6

Answer: C

NEW QUESTION 10
An organization suffered an outage and a critical system took 90 minutes to come back online. Though there was no data loss during the outage, the expectation was that the critical system would be available again within 60 minutes Which of the following is the 60-minute expectation an example of:

• A. MTBF
• B. RPO
• C. MTTR
• D. RTO

Answer: D

NEW QUESTION 11
Which of the following describes the BEST approach for deploying application patches?

• A. Apply the patches to systems in a testing environment then to systems in a staging environment, and finally to production systems.
• B. Test the patches in a staging environment, develop against them in the development environment, andthen apply them to the production systems
• C. Test the patches m a test environment apply them to the production systems and then apply them to a staging environment
• D. Apply the patches to the production systems apply them in a staging environment, and then test all of them in a testing environment

Answer: A

NEW QUESTION 12
An employee has been charged with fraud and is suspected of using corporate assets. As authorities collect evidence, and to preserve the admissibility of the evidence, which of the following forensic techniques should be used?

• A. Order of volatility
• B. Data recovery
• C. Chain of custody
• D. Non-repudiation

Answer: C

NEW QUESTION 13
A Chief Information Security Officer (CISO) is concerned about the organization's ability to continue business operation in the event of a prolonged DDoS attack on its local datacenter that consumes database resources. Which of the following will the CISO MOST likely recommend to mitigate this risk?

• A. Upgrade the bandwidth available into the datacenter
• B. Implement a hot-site failover location
• C. Switch to a complete SaaS offering to customers
• D. Implement a challenge response test on all end-user queries

Answer: B

NEW QUESTION 14
A company recently experienced a data breach and the source was determined to be an executive who was charging a phone in a public area. Which of the following would MOST likely have prevented this breach?

• A. A firewall
• B. A device pin
• C. A USB data blocker
• D. Biometrics

Answer: C

NEW QUESTION 15
Users at organization have been installing programs from the internet on their workstations without first proper authorization. The organization maintains a portal from which users can install standardized programs. However, some users have administrative access on their workstations to enable legacy programs to function property. Which of the following should the security administrator consider implementing to address this issue?

• A. Application code signing
• B. Application whitellsting
• C. Data loss prevention
• D. Web application firewalls

Answer: B

NEW QUESTION 16
Which of the following would BEST identify and remediate a data-loss event in an enterprise using third-party, web-based services and file-sharing platforms?

• A. SIEM
• B. CASB
• C. UTM
• D. DLP

Answer: D

NEW QUESTION 17
Which of the following provides the BEST protection for sensitive information and data stored in cloud-based services but still allows for full functionality and searchability of data within the cloud-based services?

• A. Data encryption
• B. Data masking
• C. Anonymization
• D. Tokenization

Answer: A

NEW QUESTION 18
A cybersecurity analyst needs to implement secure authentication to third-party websites without users’ passwords. Which of the following would be the BEST way to achieve this objective?

• A. OAuth
• B. SSO
• C. SAML
• D. PAP

Answer: C

NEW QUESTION 19
A user reports constant lag and performance issues with the wireless network when working at a local coffee shop. A security analyst walks the user through an installation of Wireshark and get a five-minute pcap to analyze. The analyst observes the following output:

Which of the following attacks does the analyst MOST likely see in this packet capture?

• A. Session replay
• B. Evil twin
• C. Bluejacking
• D. ARP poisoning

Answer: B

NEW QUESTION 20
A recent audit uncovered a key finding regarding the use of a specific encryption standard in a web application that is used to communicate with business customers. Due to the technical limitations of its customers the company is unable to upgrade the encryption standard. Which of the following types of controls should be used to reduce the risk created by this scenario?

• A. Physical
• B. Detective
• C. Preventive
• D. Compensating

Answer: D

NEW QUESTION 21
A security engineer needs to implement an MDM solution that complies with the corporate mobile device policy. The policy states that in order for mobile users to access corporate resources on their devices the following requirements must be met:
• Mobile device OSs must be patched up to the latest release
• A screen lock must be enabled (passcode or biometric)
• Corporate data must be removed if the device is reported lost or stolen
Which of the following controls should the security engineer configure? (Select TWO)

• A. Containerization
• B. Storage segmentation
• C. Posturing
• D. Remote wipe
• E. Full-device encryption
• F. Geofencing

Answer: DE

NEW QUESTION 22
While checking logs, a security engineer notices a number of end users suddenly downloading files with the .t ar.gz extension. Closer examination of the files reveals they are PE32 files. The end users state they did not initiate any of the downloads. Further investigation reveals the end users all clicked on an external email containing an infected MHT file with an href link a week prior. Which of the following is MOST likely occurring?

• A. A RAT was installed and is transferring additional exploit tools.
• B. The workstations are beaconing to a command-and-control server.
• C. A logic bomb was executed and is responsible for the data transfers.
• D. A fireless virus is spreading in the local network environment.

Answer: A

NEW QUESTION 23
A vulnerability assessment report will include the CVSS score of the discovered vulnerabilities because the score allows the organization to better.

• A. validate the vulnerability exists in the organization's network through penetration testing
• B. research the appropriate mitigation techniques in a vulnerability database
• C. find the software patches that are required to mitigate a vulnerability
• D. prioritize remediation of vulnerabilities based on the possible impact.

Answer: D

NEW QUESTION 24
The Chief Executive Officer (CEO) of an organization would like staff members to have the flexibility to work from home anytime during business hours, incident during a pandemic or crisis, However, the CEO is concerned that some staff members may take advantage of the of the flexibility and work from high-risk countries while on holidays work to a third-party organization in another country. The Chief information Officer (CIO) believes the company can implement some basic to mitigate the majority of the risk. Which of the following would be BEST to mitigate CEO’s concern? (Select TWO).

• A. Geolocation
• B. Time-of-day restrictions
• C. Certificates
• D. Tokens
• E. Geotagging
• F. Role-based access controls

Answer: AE

NEW QUESTION 25
......