Which of the following are unique characteristics of

a rainbow table attack but not of a brute-force

attack? (Select two.)

• This attack doesn’t require the hashed passwords

• This attack involves precomputed hash values

• This attack must be conducted online

• This attack circumvents account lockout

  restrictions

You decided to implement TLS encryption between

two servers to protect the data being transferred

between them. Which of the following states of data

best represents what you are putting in place?

• data in rest

• data in transit

• data in use

• data in processing

A security analyst is reviewing the following attack log output:

Which of the following types of attacks does this MOST likely represent?

• rainbow attack

• brute force

• password spraying

• dictionary

A major clothing company recently lost a large amount of proprietary information. The security officer must find a solution to ensure this never happens again. Which of the following is the BEST technical implementation to prevent this from happening again?

• Configure DLP solutions

• Enable role-based

• Mandate job rotation

• Implement content filters

Your organization has been moving new

applications from the testing environment directly

to production, but lately there have been many

issues. You have been asked to help mitigate these

issues. Which of the following are the most

appropriate? (Select two.)

• Move the code to both production environments

  to troubleshoot on one in case the other fails.

• Set up a parallel production environment.

• Set up a staging environment to closely match the

  production environment.

• Move the code to staging prior to moving it to

  production.

The IT department on-site developer has been with the team for many years. Each time an application is released, the security team is able to identify multiple vulnerabilities. Which of the following would BEST help the team ensure the application is ready to be released to production?

• Limit the use of third-party libraries

• Prevent data exposure queries

• Obfuscate the source code

• Submit the application to QA before releasing it.

Which of the following is an example of two-factor

authentication?

• Website requiring username and password

• ATM requiring credit card and PIN

• Website requiring a one-time token code to log in

• ATM requiring facial recognition

The business units you represent are complaining

that there are too many applications for which they

need to remember unique complex passwords. This

is leading many to write down their passwords.

Which of the following should you implement?

• TOTP

• HOTP

• MFA

• SSO

The aerospace company you work for is developing a

highly secret new component. The computers to

develop the component need to be isolated to

prevent connections to the outside world. Which of

the following should you put in place to provide the

most secure setup?

• firewall

• air gap

• hot and cold aisle

• Pulverized network

Your training director has an unsupervised room

that he wants to use as a training lab for the next few

months. The lab will hold 20 laptops and

confidential training manuals. Which the following

controls are most appropriate in this situation?

(Select two.)

• cable locks

• locking cabinets

• mantrap

• biometric reader