CySA+ (151-200)

NO.151 Which of the following technologies can be used to house the entropy keys for disk

encryption on desktops and laptops?

• Self-encrypting drive

• Bus encryption

• TPM

• HSM

NO.153 An employee in the billing department accidentally sent a spreadsheet containing payment

card data to a recipient outside the organization The employee intended to send the spreadsheet to

an internal staff member with a similar name and was unaware of the mistake until the recipient

replied to the message In addition to retraining the employee, which of the following would prevent

this from happening in the future?

(ExamTopic'e gore guncellendi)

• A. Implement outgoing filter rules to quarantine messages that contain card data

• B. Configure the outgoing mail filter to allow attachments only to addresses on the whitelist

• C. Remove all external recipients from the employee's address book

• D. Set the outgoing mail filter to strip spreadsheet attachments from all messages.

NO.152 A cybersecurity analyst is responding to an incident. The company's leadership team wants

to attribute the incident to an attack group. Which of the following models would BEST apply to the

situation?

• Intelligence cycle

• Diamond Model of Intrusion Analysis

• Kill chain

• MITRE ATT&CK

NO.154 During an investigation, a security analyst determines suspicious activity occurred during

the night shift over the weekend. Further investigation reveals the activity was initiated from an

internal IP going to an external website.

Which of the following would be the MOST appropriate recommendation to prevent the activity from

happening in the future?

• An IPS signature modification for the specific IP addresses

• An IDS signature modification for the specific IP addresses

• A firewall rule that will block port 80 traffic

• A firewall rule that will block traffic from the specific IP addresses

NO.155 Company A is m the process of merging with Company B As part of the merger, connectivity between the ERP systems must be established so portent financial information can be shared between the two entitles. Which of the following will establish a more automated approach to secure data transfers between the two entities?

• A. Set up an FTP server that both companies can access and export the required financial data to a

  folder.

• B. Set up a VPN between Company A and Company B. granting access only lo the ERPs within the

  connection

• C. Set up a PKI between Company A and Company B and Intermediate shared certificates between

  the two entities

• D. Create static NATs on each entity's firewalls that map lo the ERP systems and use native ERP

  authentication to allow access.

• 
• xxx

• xxx

• xxx

NO.157 A code review reveals a web application is using lime-based cookies for session

management. This is a security concern because lime-based cookies are easy to:

• parameterize.

• decode.

• guess.

• decrypt.

NO.158 A security analyst received an email with the following key:

Xj3XJ3LLc

A second security analyst received an email with following key:

3XJ3xjcLLC

The security manager has informed the two analysts that the email they received is a key that allows

access to the company's financial segment for maintenance. This is an example of:

• A. dual control

• private key encryption

• separation of duties

• public key encryption

• two-factor authentication

159 An organization has not had an incident for several month. The Chief information Security Officer (CISO) wants to move to proactive stance for security investigations. Which of the following

would BEST meet that goal?

• Root-cause analysis

• Active response

• Advanced antivirus

• Information-sharing community

• Threat hunting

• strace /proc/1301

• rpm -V openash-server

• /bin/la -1 /proc/1301/exe

• kill -9 1301