NO.241 Several employees have noticed other bystanders can clearly observe a terminal where

passcodes are being entered. Which of the following can be eliminated with the use of a privacy

screen?

• Shoulder surfing

• Spear phishing

• Impersonation attack

• Card cloning

NO.242 A security analyst needs to complete an assessment.

The analyst is logged into a server and

must use native tools to map services running on it to the server's listening ports.

Which of the

following tools can BEST accomplish this talk?

• Netcat

• Netstat

• Nmap

• Nessus

NO.243 A workwide manufacturing company has been experiencing email account compromised.

In one incident, a user logged in from the corporate office in France, but then seconds later, the same user account attempted a login from Brazil.

Which of the following account policies would BEST prevent this type of attack?

• Network location

• Impossible travel time

• Geolocation

• Geofencing

NO.244 A user recently attended an exposition and received some digital promotional materials.

The user later noticed blue boxes popping up and disappearing on the computer,

and reported receiving several spam emails, which the user did not open.

Which of the following is MOST likely the cause of the reported issue?

• There was a drive-by download of malware

• The user installed a cryptominer

• The OS was corrupted

• There was malicious code on the USB drive

NO.245 An organization is concerned about intellectual property theft by

employee who leave the organization.

Which of the following will be organization MOST likely implement?

• CBT

• NDA

• MOU

• AUP

NO.246 An end user reports a computer has been acting slower than normal for a few weeks. During an investigation, an analyst determines the system is sending the user's email address and a ten-digit number to an IP address once a day.

The only recent log entry regarding the user's computer is the following:

Which of the following is the MOST likely cause of the issue?

• The end user purchased and installed a PUP from a web browser

• A bot on the computer is brute forcing passwords against a website

• A hacker is attempting to exfiltrate sensitive data

• Ransomware is communicating with a command-and-control server

NO.247 An organization would like to remediate the risk associated with its cloud service provider not meeting its advertised 99.999% availability metrics.

Which of the following should the

organization consult for the exact requirements for the cloud provider?

• SLA

• BPA

• NDA

• MOU

No. 248 Which of the following will provide the BEST physical security countermeasures to stop intruders? (Choose two)

• Alarms

  &

  Signage

• Lighting

• Sensors

• Mantraps

• Fencing

NO.249 An incident response technician collected a mobile device during an investigation.

Which of the following should the technician do to maintain chain of custody?

• Document the collection and require a sign-off when possession changes.

• Lock the device in a safe or other secure location to prevent theft or alteration.

• Place the device in a Faraday cage to prevent corruption of the data.

• Record the collection in a blockchain-protected public ledger.

NO.250 Administrators have allowed employee to access their company email from personal

computers.

However, the administrators are concerned that these computes are another attach

surface and can result in user accounts being breached by foreign actors.

Which of the following actions would provide the MOST secure solution?

• Enable an option in the administration center so accounts can be locked if they are accessed from

  different geographical areas

• Implement a 16-character minimum length and 30-day expiration password policy

• Set up a global mail rule to disallow the forwarding of any company email to email addresses

  outside the organization

• Enforce a policy that allows employees to be able to access their email only while they are

  connected to the internet via VPN