Bns6

An organization is developing an authentication service for use at the entry and exit ports of country borders. The service will use data feeds obtained from passport systems, passenger manifests, and high- definition video feeds from CCTV systems that are located at the ports. The service will incorporate machine-learning techniques to eliminate biometric enrollment processes while still allowing authorities to identify passengers with increasing accuracy over time. The more frequently passengers travel, the more accurately the service will identify them.

Which of the following biometrics will MOST likely be used, without the need for enrollment?

• Voice

• Gait

• Vein

• Facial

• Retina

A small company that does not have security staff wants to improve its security posture. Which of the following would BEST assist the company?

• MSSP

• SOAR

• laaS

• PaaS

An organization's help desk is flooded with phone calls from users stating they can no longer access certain websites. The help desk escalates the issue to the security team, as these websites were accessible the previous day. The security analysts run the following command: ipconfig /flushdns, but the issue persists. Finally, an analyst changes the DNS server for an impacted machine, and the issue goes away. Which of the following attacks MOST likely occurred on the original DNS server?

• 1. DNS cache poisoning

• 1. Domain hijacking

• 1. Distributed denial-of-service

• 1. DNS tunneling

A cybersecurity manager has scheduled biannual meetings with the IT team and department leaders to discuss how they would respond to hypothetical cyberattacks. During these meetings, the manager presents a scenario and injects additional information throughout the session to replicate what might occur in a dynamic cybersecurity event involving the company, its facilities, its data, and its staff. Which of the following describes what the manager is doing?

• 1. Developing an incident response plan

• 1. Building a disaster recovery plan

• 1. Conducting a tabletop exercise

• 1. Running a simulation exercise

A RAT that was used to compromise an organization's banking credentials was found on a user's computer. The RAT evaded antivirus detection. It was installed by a user who has local administrator rights to the system as part of a remote management tool set. Which of the following recommendations would BEST prevent this from reoccurring?

• 1. Create a new acceptable use policy.

• 1. Segment the network into trusted and untrusted zones.

• 1. Enforce application whitelisting.

• 1. Implement DLP at the network boundary.

A security analyst is reviewing a new website that will soon be made publicly available. The analyst sees the following in the URL:

http://dev-site.comptia.org/home/show.php?sessionID=77276554&loc=us

The analyst then sends an internal user a link to the new website for testing purposes, and when the user clicks the link, the analyst is able to browse the website with the following URL:

http://dev-site.comptia.org/home/show.php?sessionID=98988475&loc=us

Which of the following application attacks is being tested?

• 1. Pass-the-hash

• 1. Session replay

• 1. Object deference

• 1. Cross-site request forgery

A network administrator has been asked to install an IDS to improve the security posture of an organization. Which of the following control types is an IDS?

• Corrective

• Physical

• Detective

• Administrative

Which of the following should be put in place when negotiating with a new vendor about the timeliness of the response to a significant outage or incident?

• MOU

• MTTR

• SLA

• NDA

A startup company is using multiple SaaS and laaS platforms to stand up a corporate infrastructure and build out a customer-facing web application. Which of the following solutions would be BEST to provide security, manageability, and visibility into the platforms?

• SIEM

• DLP

• CASB

• SWG

A root cause analysis reveals that a web application outage was caused by one of the company's developers uploading a newer version of the third-party libraries that were shared among several applications. Which of the following implementations would be BEST to prevent the issue from reoccurring?

• CASB

• SWG

• 1. Containerization

• 1. Automated failover