Choloe

Which of the following is the PRIMARY purpose of installing a mantrap within a facility?

• Control traffic

• Prevent rapid movement

• |Prevent piggybacking

• Control air flow

A security professional can BEST mitigate the risk of using a Commercial Off-The-Shelf (COTS) solution by deploying the application with which of the following controls in place?

• Whitelisting application

• Network segmentation

• Hardened configuration

• Blacklisting application

Which of the following would an information security professional use to recognize changes to content, particularly unauthorized changes?

• File Integrity Checker

• Security information and event management (SIEM) system

• Audit Logs

• Intrusion detection system (IDS)

An organization with divisions in the United States (US) and the United Kingdom (UK) processes data comprised of personal information belonging to subjects living in the

European Union (EU) and in the US. Which data MUST be handled according to the privacy protections of General Data Protection Regulation (GDPR)?

• Only the EU citizens’ data

• Only the EU residents’ data

• Only the UK citizens' data

• Only data processed in the UK

Which of the following has the responsibility of information technology (IT) governance?

• Chief Information Officer (CIO)

• Senior IT Management

• Board of Directors

• Chief Information Security Officer (CISO)

Dumpster diving is a technique used in which stage of penetration testing methodology?

• Attack

• Discovery

• Reporting

• Planning

What is the MOST common cause of Remote Desktop Protocol (RDP) compromise?

• Brute force attack

• POrt Scan

• Remote Exploit

• Social Engineering

An organization is looking to include mobile devices in its asset management system for better tracking. In which system tier of the reference architecture would mobile

devices be tracked?

• 0

• 1

• 2

• 3

Which is MOST important when negotiating an Internet service provider (ISP) service-level agreement (SLA) by an organization that solely provides Voice over Internet

Protocol (VoIP) services?

• Mean time to repair (MTTR)

• Quality of Service (QoS) between applications

• Availability of network services

• Financial penalties in case of disruption

A company developed a web application which is sold as a Software as a Service (SaaS) solution to the customer. The application is hosted by a web server running ona

specific operating system (OS) on a virtual machine (VM). During the transition phase of the service, it is determined that the support team will need access to the

application logs. Which of the following privileges would be the MOST suitable?

• Administrative privileges on the OS

• Administrative privileges on the web server

• Administrative privileges on the hypervisor

• Administrative privileges on the application folders