Security + quiz 19

Which of the following scenarios BEST describes a risk reduction technique?

• A security control objective cannot be met through a technical change, so the company purchases insurance and is no longer concerned about losses from data breaches.

• A security control objective cannot be met through a technical change, so the company implements a policy to train users on a more secure method of operation.

• A security control objective cannot be met through a technical change, so the company changes as method of operation

• A security control objective cannot be met through a technical change, so the Chief Information Officer (CIO) decides to sign off on the risk.

An organization with a low tolerance for user inconvenience wants to protect laptop hard drives against loss or data theft. Which of the following would be the MOST acceptable?

• SED

• HSM

• DLP

• TPM

An end user reports a computer has been acting slower than normal for a few weeks. During an

investigation, an analyst determines the system is sending the user's email address and a tendigit number to an IP address once a day. The only recent log entry regarding the user's

computer is the following:

Time: 06:32:29 UTC

Event Description: This file meets the ML algorithm's medium-confidence threshold.

Process Blocked: False

File Quarantined: False

Operating System: Windows 10

File Name: \Device\HarddiskVolume4\Users\jdoe\AppData\Local\Microsoft\Windows\INetCache\IE\pdftodcx.msi

Connection Details: 35.242.219.204:80

Which of the following is the MOST likely cause of the issue?

• The end user purchased and installed a PUP from a web browser

• A bot on the computer is brute forcing passwords against a website

• A hacker is attempting to exfiltrate sensitive data

• Ransomware is communicating with a command-and-control server.

Which of the following scenarios would make a DNS sinkhole effective in thwarting an attack?

• An attacker is sniffing traffic to port 53, and the server is managed using unencrypted usernames and passwords.

• An organization is experiencing excessive traffic on port 53 and suspects an attacker is trying to DoS the domain name server.

• Malware trying to resolve an unregistered domain name to determine if it is running in an isolated sandbox

• Routing tables have been compromised, and an attacker is rerouting traffic to malicious websites

A security analyst reviews the datacenter access logs for a fingerprint scanner and notices an abundance of errors that correlate with users' reports of issues accessing the facility. Which of the following MOST likely the cause of the cause of the access issues?

• False rejection

• Cross-over error rate

• Efficacy rale

• Attestation

A company's Chief Information Security Officer (CISO) recently warned the security manager that the company's Chief Executive Officer (CEO) is planning to publish a controversial option article in a national newspaper, which may result in new cyberattacks Which of the following would be BEST for the security manager to use in a threat mode?

• Hacktivists

• White-hat hackers

• Script kiddies

• Insider threats

When used at the design stage, which of the following improves the efficiency, accuracy, and speed of a database?

• Tokenization

• Data masking

• Normalization

• Obfuscation

An analyst needs to set up a method for securely transferring files between systems. One of the requirements is to authenticate the IP header and the payload. Which of the following services would BEST meet the criteria?

• TLS

• PFS

• ESP

• AH

A company has determined that if its computer-based manufacturing is not functioning for 12 consecutive hours, it will lose more money that it costs to maintain the equipment. Which of the following must be less than 12 hours to maintain a positive total cost of ownership?

• MTBF

• RPO

• RTO

• MTTR

Which of the following control sets should a well-written BCP include?

(Select THREE)

• Preventive

• Detective

• Corrective

• Compensating

• Recovery