CySa+ PT5: 3 of 3

What tool is NOT useful for capturing or analyzing memory data for forensic analysis on a Windows machine?

• Fmem

• Volatility Framework

• ​DumpIt

• ​EnCase

Richard’s company processes credit cards and they are required to be compliant with PCI-DSS. If his company has a breach of card data, what type of disclosure will they have to provide?

• Notification to local law enforcement

• ​Notification to their acquiring bank

• Notification to federal law enforcement

• ​Notification to Visa and Mastercard

Rhonda would like to build some scripts that detect malware beaconing behavior. Which one of the following isn’t a typical means of identifying malware behavior on a network?

• ​Persistence of the beaconing

• ​Beacon protocol

• ​Beaconing interval

• ​Removal of known traffic

What security control provides Windows administrators with an efficient way to manage system configuration settings across a large number of devices?

• ​Patch management

• ​GPO

• ​HIPS

• Anti-malware

Tyler needs to implement a security control designed to detect fraudulent cases that happen, regardless of the presence of other security controls. Which of the following is best suited to meet his needs?

• ​Separation of duties

• ​Least privilege

• ​Dual control

• ​Mandatory vacations

The service desk has been receiving a large number of complaints from external users that a web application is responding slow to requests and frequently receives a “connection timed out” error when they attempt to submit information into the application. What software development best practice should have been implemented in order to have prevented this issue from occurring?

• stress testing

• regression testing

• ​input validation

• fuzzing

What SDLC model emphasizes individuals and interactions over processes and tools, customer collaboration over contract negotiation, and working software over comprehensive documentation?

• ​Waterfall

• ​Spiral

• Agile

• ​RAD

Of all the items listed, which element is least likely to be found in a data retention policy?

• ​Minimum retention period

• ​Maximum retention period

• ​Description of information needing to be retained

• Classification of information

Which party in a federation provides services to members of the federation?

• IdP

• AP

• RP

• IP

What secure coding practice helps to ensure characters like <, >, /, and ‘ are not accepted from the data provided by users?

• Risk assessment

• User output validation

• Error message management

• ​User input validation