Bns6pt3

A smart switch has the ability to monitor electrical levels and shut off power to a building in the event of power surge or other fault situation. The switch was installed on a wired network in a hospital and is monitored by the facilities department via a cloud application. The security administrator isolated the switch on a separate VLAN and set up a patch routine. Which of the following steps should also be taken to harden the smart switch?

• 1. Set up an air gap for the switch.

• 1. Change the default password for the switch.

• 1. Place the switch In a Faraday cage.

• 1. Install a cable lock on the switch

Which of the following describes the BEST approach for deploying application patches?

• 1. Apply the patches to systems in a testing environment then to systems in a staging environment, and finally to production systems.

• 1. Test the patches in a staging environment, develop against them in the development environment, and then apply them to the production systems

• 1. Test the patches m a test environment apply them to the production systems and then apply them to a staging environment

• 1. Apply the patches to the production systems apply them in a staging environment, and then test all of them in a testing environment

A security engineer needs to enhance MA access to sensitive areas in a building. A key card and fingerprint scan are already in use. Which of the following would add another factor of authentication?

• 1. Hard token

• 1. Retina scan

• 1. SMS text

• 1. Keypad PIN

A symmetric encryption algorithm is BEST suited for:

• 1. key-exchange scalability.

• 1. protecting large amounts of data.

• 1. providing hashing capabilities,

• 1. implementing non-repudiation.

A company has limited storage available and online presence that cannot for more than four hours. Which of the following backup methodologies should the company implement to allow for the FASTEST database restore time In the event of a failure, which being maindful of the limited available storage space?

• 1. Implement fulltape backup every Sunday at 8:00 p.m and perform nightly tape rotations.

• 1. Implement different backups every Sunday at 8:00 and nightly incremental backups at 8:00 p.m

• 1. Implement nightly full backups every Sunday at 8:00 p.m

• 1. Implement full backups every Sunday at 8:00 p.m and nightly differential backups at 8:00

A security analyst is reviewing information regarding recent vulnerabilities. Which of the following will the analyst MOST likely consult to validate which platforms have been affected?

• 1. OSINT

• 1. SIEM

• 1. CVSS

• 1. CVE

A security analyst needs to produce a document that details how a security incident occurred, the steps that were taken for recovery, and how tuture incidents can be avoided. During which ot the following stages of the response process will this activity take place?

• 1. Recovery

• 1. Identification

• 1. Lessons learned

• 1. Preparation

A critical file server is being upgraded and the systems administrator must determine which RAID level the new server will need to achieve parity and handle two simultaneous disk failures.

Which of the following RAID levels meets this requirements?

• 1. RAID 0+1

• 1. RAID 2

• 1. RAID 5

• 1. RAID 6

Which of the following provides the BEST protection for sensitive information and data stored in cloud-based services but still allows for full functionality and searchability of data within the cloud-based services?

• 1. Data encryption

• 1. Data masking

• 1. Anonymization

• 1. Tokenization

A company uses wireless tor all laptops and keeps a very detailed record of its assets, along with a comprehensive list of devices that are authorized to be on the wireless network. The Chief Information Officer (CIO) is concerned about a script kiddie potentially using an unauthorized device to brute force the wireless PSK and obtain access to the internal network. Which of the following should the company implement to BEST prevent this from occurring?

• 1. A BPDU guard

• 1. WPA-EAP

• 1. IP filtering

• 1. A WIDS