A security engineer is installing a WAF to protect the company's website from malicious web requests over SSL. Which of the following is needed to meet the objective?

• A reverse proxy

• A decryption certificate

• A spill-tunnel VPN

• Load-balanced servers

A security analyst is running a vulnerability scan to check for missing patches during a suspected security rodent During

which of the following phases of the response process is this activity MOST likely occurring?

• Containment

• Preparation

• Recovery

• Identification

A security engineer needs to create a network segment that can be used for servers that require connections from

untrusted networks. Which of the following should the engineer implement?

• An air gap

• A screened subnet

• A VLAN

• A hot site

A systems engineer is building a new system for production. Which of the following is the FINAL step to be performed prior to promotion to production?

• Disable unneeded services.

• Install the latest security patches.

• Run a vulnerability scan.

• Encrypt all disks.

A major clothing company recently lost a large amount of proprietary information. The security officer must find a solution to ensure this never happens again. Which of the following is the BEST technical implementation to prevent this from happening again?

• Configure DLP solutions

• Disable peer-to-peer sharing

• Enable role-based

• Mandate job rotation

• Implement content filters

Which of the following would be BEST for a technician to review to determine the total risk an organization can bear

when assessing a "cloud-first" adoption strategy?

• Risk matrix

• Risk tolerance

• Risk register

• Risk appetite

Ann, a customer, received a notification from her mortgage company stating her PII may be shared with partners,

affiliates, and associates to maintain day-to-day business operations.

Which of the following documents did Ann receive?

• An annual privacy notice

• A non-disclosure agreement

• A privileged-user agreement

• A memorandum of understanding

The help desk has received calls from users in multiple locations who are unable to access core network services. The

network team has identified and turned off the network switches using remote commands. Which of the following

actions should the network team take NEXT?

• Disconnect all external network connections from the firewall

• Send response teams to the network switch locations to perform updates

• Turn on all the network switches by using the centralized management software

• Initiate the organization's incident response plan.

A company would like to set up a secure way to transfer data between users via their mobile phones. The company's top

priority is utilizing technology that requires users to be in as close proximity as possible to each other. Which of the

following connection methods would BEST fulfill this need?

• Cellular

• NFC

• Wi-Fi

• Bluetooth

A security analyst has been tasked with creating a new WiFi network for the company. The requirements received by

the analyst are as follows:

•Must be able to differentiate between users connected to WiFi

•The encryption keys need to change routinely without interrupting the users or forcing reauthentication

•Must be able to integrate with RADIUS

•Must not have any open SSIDs

Which of the following options BEST accommodates these requirements?

• WPA2-Enterprise

• WPS

• 802.11n

• WPA3-PSK