SiberAbluka 601-630

NO.601 Which of tre following would BEST identity and remediate a catatoss

event in an enterprise using third-pany, web-based services and file-sharing platanmns?

• (A). SIEM

• (B). CASE

• (C). UTM

• (D). EDR

NO.602 An engineer is setting up a VDI environment for a factory tocation, and the business wants to deploy a low-cost solution to enadle users on the shop floor to log in to the VDI environment directly. Which of the following should the engineer select to meet these requirements?

• (A). Laptops

• (B). Containers

• (C). Thin clients

• (D). Workstations

NO.603 A security analyst is reviewing the following command-line output:

Which of the following Is the analyst observing?

• (A). IGMP spoofing

• (B). URL redirection

• (C). MAG address cloning

• (D). DNS poisoning

NO.604 Which of the following should a data owner require all personnel to sign to legally protect intellectual property?

• (A). An NDA

• (B). An AUP

• (C). An ISA

• (D). An MOU

NO.605 A security administrator needs to inspect in-transit files on the enterprise network to search for Pll, credit card data, and classification words. Which of the following would be the BEST to use?

• (A). IDS solution

• (B). EDR solution

• (C). HIPS software solution

• (D). Network DLP solution

NO.606 A security analyst must determine if either SSH or Telnet is being used to log in to servers. Which of the following should the analyst use?

• (A). logger

• (B). Metasploit

• (C). tcpdump

• (D). netstat

NO.607 A routine audit of medical billing claims revealed that several claims were submitted

without the subscriber's knowledge. A review of the audit logs for the medical billing company's

system indicated a company employee downloaded customer records and adjusted the direct

deposit information to a personal bank account. Which of the following does this action describe?

• (A). Insider threat

• (B). Social engineering

• (C). Third-party risk

• (D). Data breach

NO.608 A security administrator is trying to determine whether a server is vulnerable to a range of attacks. After using a tool, the administrator obtains the following output: Which of the following attacks was successfully implemented based on the output?

• (A). Memory leak

• (B). Race conditions

• (C). SQL injection

• (D). Directory traversal

NO.611 A Chief Security Officer (CSO) is concerned about the volume and integrity of sensitive

information that is exchanged between the organization and a third party through email. The CSO is particularly concerned about an unauthorized party who is intercepting information that is in transit between the two organizations. Which of the following would address the CSO's concerns?

• (A). SPF

• (B). DMARC

• (C). SSL

• (D). DKIM

• (E). TLS

NO.612 Which of the following BEST describes the MFA attribute that requires a callback on a predefined landline?

• (A). Something you exhibit

• (B). Something you can do

• (C). Someone you know

• (D). Somewhere you are