Prof. Messer Exam A 1-20

Which of the following would be commonly provided by CASB? (Select TWO)

• List of all internal Windows devices that have not installed the latest security patches

• List of applications in use

• Centralized log sList of network outages for the previous month
  torage facility

• List of applications in use

• VPN connectivity for remote users

During the login process, your phone receives a text message with a one-time passcode

You enter your PIN to make a deposit into an ATM

You must sign a check-in sheet before entering a controlled area

You can use your fingerprint to unlock the door to the data center

Your login will not work unless you are connected to the VPN

You've hired a third-party to gather information about your company's servers and data. The third-party will not have direct access to your internal network but can gather information from any other source. Which of the following would BEST describe this approach?

• Backdoor testing

• Passive footprinting

• OS fingerprinting

• Partially known environment

Answer explanation

Passive footprinting focuses on learning as much information from open sources such as social media, corporate websites and business organizations.

Which of these protocols use TLS to provide secure communication? (Select TWO)

• HTTPS

• SSH

• FTPS

• SNMPv2

• DNSSEC

Answer explanation

TLS (Transport Layer Security) is a cryptographic protocol used to encrypt network communication. HTTPS is the Hypertext Transfer Protocol over TLS, and FTPS is the File Transfer Protocol over TLS.

An earlier version of TLS is SSL (Secure Sockets Layer). Although we don't commonly see SSL in use any longer, you may see TLS communication referenced as SSL.

Which of these threats actors would be MOST likely to attack systems for direct financial gain?

• Organized crime

• Hacktivist

• Nation State

• Competitor

Answer explanation

An organized crime actor is motivated by money, and their hacking objectives are usually based around objectives that can be easily exchanged for financial capital.

A security incident has occurred on a file server. Which of the following data sources should be gathered to address file storage volatility? (Select TWO)

• Partition data

• Kernel statistics

• ROM data

• Temporary file systems

• Process table

Answer explanation

Both temporary file system data and partition data are part of the file storage subsystem.