101-120

You are security administrator investigating a potential infection on a network.

Click on each host and firewall. Review all logs to determine which host originated the Infecton and

then deny each remaining hosts clean or infected.

• 
• .

An engineer needs to find a solution that creates an added layer of security by preventing unauthorized access to internal company resources. Which of the following would be the best solution?

• RDP server

• Jump server

• Proxy server

• Hypervisor

An employee receives a text message that appears to have been sent by the payroll department and is asking for credential verification. Which of the following social engineering techniques are being attempted? (Choose two.)

• Impersonation

• Phishing

• Smishing

• Vishing

• Typosquatting

Which of the following tools can assist with detecting an employee who has accidentally emailed a file containing a customer's PII?

• SCAP

• Net Flow

• Antivirus

• DLP

Which of the following involves an attempt to take advantage of database misconfigurations?

• Buffer overflow

• SQL injection

• VM escape

• Memory injection

A company's end users are reporting that they are unable to reach external websites. After reviewing the performance data for the DNS severs, the analyst discovers that the CPU, disk, and memory usage are minimal, but the network interface is flooded with inbound traffic. Network logs show only a small number of DNS queries sent to this server. Which of the following best describes what the security analyst is seeing?

• Concurrent session usage

• Secure DNS cryptographic downgrade

• On-path resource consumption

• Reflected denial of service

Which of the following roles, according to the shared responsibility model, is responsible for securing the company's database in an IaaS model for a cloud environment?

• Client

• Third-party vendor

• Cloud provider

• DBA

Which of the following vulnerabilities is exploited when an attacker overwrites a register with a malicious address?

• VM escape

• SQL injection

• Buffer overflow

• Race condition

Which of the following is used to add extra complexity before using a one-way data transformation algorithm?

• Key stretching

• Data masking

• Steganography

• Salting

A systems administrator wants to prevent users from being able to access data based on their responsibilities. The administrator also wants to apply the required access structure via a simplified format. Which of the following should the administrator apply to the site recovery resource group?

• RBAC

• ACL

• SAML

• GPO