Sec Practice Quiz

A retail executive recently accepted a job with a major competitor. The following week, a security analyst reviews the security logs and identifies successful login attempts to access the departed executive's accounts. Which of the following security practices would have addressed the issue?

• A non-disclosure agreement

• Least privilege

• An acceptable use policy

• Offboarding

Which of the following should be put in place when negotiating with a new vendor about thetimeliness of the response to a significant outage or incident?

• MOU

• MTTR

• SLA

• NDA

Phishing and spear-phishing attacks have been occurring more frequently against a company'sstaff. Which of the following would MOST likely help mitigate this issue?

• DNSSEC and DMARC

• DNS query logging

• Exact mail exchanger records in the DNS

• The addition of DNS conditional forwarder

A network engineer needs to build a solution that will allow guests at the company's headquartersto access the Internet via WiFi. This solution should not allow access to the internal corporatenetwork, but it should require guests to sign off on the acceptable use policy before accessing theInternet. Which of the following should the engineer employ to meet these requirements?

• Implement open PSK on the APs

• Deploy a WAF

• Configure WIPS on the APs

• Install a captive portal

Several employees return to work the day after attending an industry trade show. That same day,the security manager notices several malware alerts coming from each of the employee'sworkstations. The security manager investigates but finds no signs of an attack on the perimeterfirewall or the NIDS. Which of the following is MOST likely causing the malware alerts?

• A worm that has propagated itself across the intranet, which was initiated by presentation media

• A fileless virus that is contained on a vCard that is attempting to execute an attack

• A Trojan that has passed through and executed malicious code on the hosts

• A USB flash drive that is trying to run malicious code but is being blocked by the host firewal

Which of the following allows for functional test data to be used in new systems for testing and training purposes to protect the real data?

• Data encryption

• Data masking

• Data deduplication

• Data minimization

A network administrator would like to configure a site-to-site VPN utilizing IPsec. The administrator wants the tunnel to be established with data integrity, encryption, authentication, and anti-replay functions. Which of the following should the administrator use when configuring the VPN?

• DNSSEC

• AH

• EDR

• ESP

A system in the network is used to store proprietary secrets and needs the highest level of security possible. Which of the following should a security administrator implement to ensure the system cannot be reached from the Internet?

• VLAN

• Air Gap

• NAT

• Firewall

Which of the following should a technician use to protect a cellular phone that is needed for an investigation, to ensure the data will not be removed remotely?

• Air gap

• Secure Cabinet

• Faraday cage

• Safe

A company is implementing a DLP solution on the file server. The file server has PII, financial information, and health information stored on it. Depending on what type of data that is hosted on the file server, the company wants different DLP rules assigned to the data. Which of the following should the company do to help to accomplish this goal?

• Classify the data

• Mask the data

• Assign the application owner

• Perform a risk analysis