Sec+ Quiz - 3

An administrator is experiencing issues when trying to upload a support file to a vendor. A pop-up message reveals that a payment card number was found in the file, and the file upload was Mocked. Which of the following controls is most likely causing this issue and should be checked FIRST?

• DLP

• Firewall rule

• Content filter

• MDM

• Application allow list

A security analyst needs to be able to search and correlate logs from multiple sources in a single tool. Which of the following would BEST allow a security analyst to have this ability?

• SOAR

• SIEM

• Log collectors

• Network-attached storage

Which of the following would BEST provide detective and corrective controls for thermal regulation?

• A smoke detector

• A fire alarm

• An HVAC system

• A fire suppression system

• Guards

During a trial, a judge determined evidence gathered from a hard drive was not admissible. Which of the following BEST explains this reasoning?

• The forensic investigator forgot to run a checksum on the disk image after creation.

• The chain of custody form did not note time zone offsets between transportation regions.

• The computer was turned off. and a RAM image could not be taken at the same time.

• The hard drive was not properly kept in an antistatic bag when rt was moved.

A tax organization is working on a solution to validate the online submission of documents. The solution should be carried out on a portable USB device that should be inserted on any computer that is transmitting a transaction securely. Which of the following is the BEST certificate for these requirements?

• User certificate

• Self-signed certificate

• Computer certificate

• Root certificate

Which of the following will increase cryptographic security?

• High data entropy

• Algorithms that require less computing power

• Longer key longevity

• Hashing

An engineer recently deployed a group of 100 web servers in a cloud environment. Per the security policy, all web-server ports except 443 should be disabled. Which of the following can be used to accomplish this task?

• Application allow list

• SWG

• Host-based firewall

• VPN

A security engineer was assigned to implement a solution to prevent attackers from gaining access by pretending to be authorized users. Which of the following technologies meets the requirement?

• SSO

• IDS

• MFA

• TPM

A company needs to validate its updated incident response plan using a real-world scenario that will test decision points and relevant incident response actions without interrupting daily operations. Which of the following would BEST meet the company's requirements?

• Red-team exercise

• Capture-the-flag exercise

• Tabletop exercise

• Phishing exercise

Which of the following are common VoIP-associated vulnerabilities? (Select TWO).

• SPIM

• Vishing

• Phishing

• Credential harvesting

• Tailgating