Sec+4

A software developer wants to store user passwords in a way that even if the database is compromised, attackers would not be able to retrieve the original passwords. What technique should the developer use to achieve this?

• Symmetric Encription

• Digital signing

• Hashing

• Steganography

operations like cryptographic processes and biometric data validation are isolated from the main operating system to prevent potential tampering. Which tool should they consider implementing to achieve this objective?

• Hardware Security Module (HSM)

• Key Managemenet System (KMS)

• Secure enclave

• Trusted Platform Module (TPM)

A web server hosting the company’s e-commerce site is set for an OS upgrade. The upgrade is expected to last 30 minutes. What should be a primary consideration to minimize customer impact due to potential downtime?

• Implementing a load balancer

• Taking a backup of the e-commerce site

• Posting a maintenance notice a week in advance

• Upgrading the server's hardware

A project manager is working on a new product launch and has documents with sensitive financial projections on her local computer. She occasionally shares these documents with select board members via email. While she wants to keep the financial documents secure, she doesn’t want to encrypt all the data on her computer. Which encryption approach should she utilize?

• Full-disk Encryption

• Transport-layer Encryption

• File-level Encryption

• Partition Encryption

A security analyst is evaluating security enhancements for a series of laptops that will store highly confidential data. The analyst wants to ensure that stored data remains encrypted and the integrity of the boot process is maintained. Which of the following would BEST meet this requirements?

• Installing antivirus software on each laptop

• Enabling a software-based full-disk encryption

• Implementing a BIOS password

• Utilizing a Trusted Platform Module (TPM)

A large e-commerce company is deploying a new online payment system. The Chief Information Security Officer (CISO) is concerned about the security of cryptographic keys and wants to ensure they are protected from potential theft or compromise. Which tool should the CISO implement to provide the HIGHEST level of security for these keys?

• Password vault

• Software-based key storage

• Hardware Security Model (HSM)

• Cloud-based encryption serrvice

Sarah, a security analyst, is concerned about potential man-in-the-middle attacks on the company’s internal portal. To mitigate this risk, she recommends obtaining a digital certificate from a trusted entity. Which of the following is responsible for issuing such certificates?

• Key Distribution center

• Certificate Authority (CA)

• Tokenization system

• Security incident event manager

A financial institution is looking to adopt an encryption algorithm for its transactions that is considered to be very secure due to its longer key length, compared to older standards. Which encryption algorithm best fits this description?

• DES

• Blowfish

• RSA

• AES-256

Alice receives an email from Bob with an attached document. She wants to verify both the authenticity of the sender and the integrity of the attached document. Which of the following should Bob have used before sending the email?

• Encrypt the document with his private key

• Hash the document

• Encrypt the document with Alice's public key

• Sign the document with his private key

During a critical financial quarter, GlobalFin Corp experienced unexpected outages during peak business hours due to system maintenance, impacting its operations significantly. To prevent such occurrences in the future, what should GlobalFin Corp implement regarding their maintenance activities?

• Conduct maintenance activities randomly to avoid predictability

• Implement maintenance activities during peak business hours

• Establish designated maintenance windows

• Reduce the frequency of maintenance activities