SEXXC ++

An organization is outlining data stewardship roles and responsibilities. Which

of the following employee roles would determine the purpose of data and

how to process it?

• Data custodian

• Data protection officer

• Data controller

• Data processor

A security analyst is assessing a new y developed web application by testing

SQL injection, CSRF, and XML injection. Which of the following frameworks should the analyst consider?

• ISO

• OWASP

• MITRE ATT&CK

• NIST

A company has a flat network that is deployed in the cloud. Security policy states that all production and development servers must be segmented. Which of the following should be used to design the network to meet the security requirements?

• CASB

• VPC

• Perimeter network

• WAF

Which of the following is a security implication of newer ICS devices that are becoming more common in corporations?

• Devices with cellular communication capabilities bypass traditional network security controls

• Many devices do not support elliptic-curve encryption algorithms due to the overhead they require

• These devices often lack privacy controls and do not meet newer compliance regulations

• Unauthorized voice and audio recording can cause loss of intellectual property

A network architect wants a server to have the ability to retain network availability even if one of the network switches it is connected to goes down.

Which of the following should the architect implement on the server to achieve this goal?

• RAID

• UPS

• Load balancing

• NIC teaming

Security analysts have noticed the network becomes flooded with malicious packets at specific times of the day. Which of the following should the analysts use to investigate this issue?

• Bandwidth monitors

• Web metadata

• System files

• Correlation dashboards

An organization's Chief Information Security Officer is creating a position that will be responsible for implementing technical controls to protect data, including ensuring backups are properly maintained. Which of the following roles would MOST likely include these responsibilities?

• Data protection officer

• Data owner

• Backup administrator

• Data custodian

A Chief Security Officer is looking for a solution that can reduce the occurrence of customers receiving errors from back-end infrastructure when systems go offline unexpectedly. The security architect would like the solution to help maintain session persistence. Which of the following would BEST meet the requirements?

• Reverse proxy

• NIC teaming

• Load balancer

• Forward broxy

An employee used a corporate mobile device during a vacation. Multiple contacts were modified in the device during the employee's vacation. Which of the following attack methods did an attacker use to insert the contacts without having physical access to the device?

• Lamming

• Evil Twin

• Blue Jacking

• Disassociation

A police department is using the cloud to share information with city officials.

Which of the following cloud models describes this scenario?

• Hybrid

• Private

• Public

• Community