NO.256 A security administrator needs to create a RAID configuration that is focused on high read speeds and fault tolerance. It is unlikely that multiple drivers will fail simultaneously. Which of the following RAID configurations should the administration use

• (A). RA1D 0

• (B). RAID1

• (B). RAID1

• (D). RAID 10

NO.257 A document that appears to be malicious has been discovered in an email that was sent to a company's Chief Financial Officer (CFO). Which of the following would be BEST to allow a security analyst to gather information and confirm it is a malicious document without executing any code it may contain?

• (A). Open the document on an air-gapped network

• (B). View the document's metadata for origin clues

• (C). Search for matching file hashes on malware websites

• (D). Detonate the document in an analysis sandbox

NO.258 A network administrator is setting up wireless access points in all the conference rooms and wants to authenticate device using PKI. Which of the following should the administrator configure?

• (A). A captive portal

• (B). PSK

• (C). 802.1X

• (D). WPS

NO.259 A security analyst has received an alert about being sent via email. The analyst's Chief information Security Officer (CISO) has made it clear that PII must be handle with extreme care From which of the following did the alert MOST likely originate?

• (A). S/MIME

• (B). DLP

• (C). IMAP

• (D). HIDS

NO.260 A security analyst needs to generate a server certificate to be used for 802.1X and secure IT Certification Guaranteed, The Easy Way! 64 RDP connections. The analyst is unsure what is required to perform the task and solicits help from a senior colleague. Which of the following is the FIRST step the senior colleague will most likely tell the analyst to perform to accomplish this task?

• (A). Create an OCSP

• (B). Generate a CSR

• (C). Create a CRL

• (D). Generate a .pfx file

NO.261 An organization is tuning SIEM rules based off of threat intelligence reports. Which of the following phases of the incident response process does this scenario represent?

• (A). Lessons learned

• (B). Eradication

• (C). Recovery

• (D). Preparation

NO.262 An organization is repairing the damage after an incident, Which of the following controls es being implemented?

• (A). Detective

• (B). Preventive

• (C). Corrective

• (D). Compensating

NO.263 A company i working on mobile device security after a report revealed that users granted non-verified software access to corporate data. Which of the following ts the MOST effective security control to mitigate this risk?

• (A). Block access to application stores.

• (B). Implement OTA updates

• (C). Update the BYOD pot

• (D). Deploy a urttoem firmware

NO.264 A security analyst needs to be able to search and correlate logs from multiple sources in a single tool Which of the following would BEST allow a security analyst to have this ability?

• (A). SOAR

• (B). SIEM

• (C). Log collectors

• (D). Network-attached storage

NO.265 Accompany has a flat network that is deployed in the cloud. Security policy states that all production and development servers must be segmented. Which of the following should be used to design the network to meet the security requirements?

• (A). CASB

• (B). VPC

• (C). Perimeter network

• (D). WAF