Chapter 5 (PART I) Securing Hosts and Data

Question #3: A technician needs to prevent data loss in a laboratory. The laboratory is not connected to any external networks.

Which of the following methods would BEST prevent the exfiltration of data? (Select TWO)

• A. VPN

• B. Drive encryption

• C. Network firewall

  D. File level encryption

• E. USB blocker

• F. MFA

Question #4: The Chief Executive Officer (CEO) of an organization would like staff members to have the flexibility to work from home anytime during business hours, incident during a pandemic or crisis. However, the CEO is concerned that some staff members may take advantage of the flexibility and work from high-risk countries while on holidays work to a third-party organization in another country. The Chief information Officer (CIO) believes the company can implement some basic to mitigate the majority of the risk.

Which of the following would be BEST to mitigate the CEO's concern? (Select TWO)

• A. Geolocation

• B. Time-of-day restrictions

• D. Certificates

• E. Tokens

  F. Geotagging

• G. Role-based access controls

Question #6: A security engineer needs to implement an MDM solution that complies with the corporate mobile device policy. The policy states that in order for mobile users to access corporate resources on their devices the following requirements must be met:

Mobile device OSs must be patched up to the latest release A screen lock must be enabled (passcode or biometric) Corporate data must be removed if the device is reported lost or stolen

Which of the following controls should the security engineer configure? (Select TWO)

• A. Containerization

• B. Storage segmentation

• C. Posturing

• D. Remote wipe

• E. Full-device encryption

  G. Geofencing

Question #7: A startup company is using multiple SaaS and IaaS platforms to stand up a corporate infrastructure and build out a customer - facing web application. Which of the following solutions would be BEST to provide security, manageability, and visibility into the platforms?

• SIEM

• DLP

• CASB

• SWG

Question #8: An enterprise needs to keep cryptographic keys in a safe manner.

Which of the following network appliances can achieve this goal?

• HSM

• CASB

• TPM

• DLP

Question #9: A company recently transitioned to a strictly BYOD culture due to the cost of replacing lost or damaged corporate-owned mobile devices. Which of the following technologies would be BEST to balance the BYOD culture while also protecting the company’s data?

• Containerization

• Geofencing

• Full-disk encryption

• Remote wipe

Question #10: Which of the following distributes data among nodes, making it more difficult to manipulate the data while also minimizing downtime?

• MSSP

• Public cloud

• Hybrid cloud

• Fog computing

Question #11: A security audit has revealed that a process control terminal is vulnerable to malicious users installing and executing software on the system. The terminal is beyond end-of-life support and cannot be upgraded, so it is placed on a projected network segment. Which of the following would be MOST effective to implement to further mitigate the reported vulnerability?

• DNS sinkholding

• DLP rules on the terminal

• An IP blacklist

• Application whitelisting

Question #12: A nationwide company is experiencing unauthorized logins at all hours of the day. The logins appear to originate from countries in which the company has no employees. Which of the following controls should the company consider using as part of its IAM strategy? (Select TWO)

• A. A complex password policy

• B. Geolocation

• C. An impossible travel policy

• D. Self-service password reset

• E. Geofencing

  F. Time-based logins

Question #13: A company is adopting a BYOD policy and is looking for a comprehensive solution to protect company information on user devices. Which of the following solutions would BEST support the policy?

• Mobile device management

• Full-device encryption

• Remote wipe

• Biometrics