532 BNS6 PT5

NO.203 A user contacts the help desk to report the following:

* Two days ago, a pop-up browser window prompted the user for a name and password after

connecting to the corporate wireless SSID. This had never happened before, but the user entered the

information as requested.

* The user was able to access the Internet but had trouble accessing the department share until the

next day.

* The user is now getting notifications from the bank about unauthorized transactions.

Which of the following attack vectors was MOST likely used in this scenario?

• (A). Rogue access point

• (B). Evil twin

• (C). DNS poisoning

• (D). ARP poisoning

NO.204 The IT department at a university is concerned about professors placing servers on the

university network in an attempt to bypass security controls. Which of the following BEST represents

this type of threat?

• (A). A script kiddie

• (B). Shadow IT

• (C). Hacktivism

• (D). White-hat

NO.205 A bad actor tries to persuade someone to provide financial information over the phone in

order to gain access to funds. Which of the following types of attacks does this scenario describe?

• (A). Vishing

• (B). Phishing

• (C). Spear phishing

• (D). Whaling

NO.206 A security analyst discovers several .jpg photos from a cellular phone during a forensics

investigation involving a compromised system. The analyst runs a forensics tool to gather file

metadata. Which of the following would be part of the images if all the metadata is still intact?

• (A). The GPS location

• (B). When the file was deleted

• (C). The total number of print jobs

• (D). The number of copies made

NO.207 During a routine scan of a wireless segment at a retail company, a security administrator

discovers several devices are connected to the network that do not match the company's naming

convention and are not in the asset Inventory. WiFi access Is protected with 255-Wt encryption via

WPA2. Physical access to the company's facility requires two-factor authentication using a badge and

a passcode Which of the following should the administrator implement to find and remediate the

Issue? (Select TWO).

• (A). Check the SIEM for failed logins to the LDAP directory.

• (B). Enable MAC filtering on the switches that support the wireless network.

• (C). Run a vulnerability scan on all the devices in the wireless network

• (D). Deploy multifactor authentication for access to the wireless network

• (E). Scan the wireless network for rogue access points.

NO.208 An analyst is trying to identify insecure services that are running on the internal network

After performing a port scan the analyst identifies that a server has some insecure services enabled

on default ports Which of the following BEST describes the services that are currently running and

the secure alternatives for replacing them' (Select THREE)

• (A). SFTP FTPS

• (B). SNMPv2 SNMPv3

• (C). HTTP, HTTPS

• (D). TFTP FTP

• (F). Telnet SSH

NO.209 Some laptops recently went missing from a locked storage area that is protected by keyless

RFID-enabled locks. There is no obvious damage to the physical space. The security manager

identifies who unlocked the door, however, human resources confirms the employee was on vacation at the time of the incident. Which of the following describes what MOST likely occurred?

• (A). The employee's physical access card was cloned.

• (B). The employee is colluding with human resources

• (C). The employee's biometrics were harvested

• (D). A criminal used lock picking tools to open the door.

NO.210 During an asset inventory, several assets, supplies, and miscellaneous items were noted as

missing. The security manager has been asked to find an automated solution to detect any future

theft of equipment. Which of the following would be BEST to implement?

• (A). Badges

• (B). Fencing

• (C). Access control vestibule

• (D). Lighting

• (E). Cameras

NO.211 An end user reports a computer has been acting slower than normal for a few weeks, During

an investigation, an analyst determines the system 3 sending the users email address and a ten-digit

number ta an IP address once a day. The only resent log entry regarding the user's computer is the

following:

Which of the following is the MOST likely cause of the issue?

• (A). The end user purchased and installed 2 PUP from a web browser.

• (B). 4 bot on the computer is rule forcing passwords against a website.

• (C). A hacker Is attempting to exfilltrated sensitive data.

• (D). Ransomwere is communicating with a command-and-control server.

NO.212 A network engineer needs to create a plan for upgrading the wireless infrastructure in a

large office Priority must be given to areas that are currently experiencing latency and connection

issues. Which of the following would be the BEST resource for determining the order of priority?

• (A). Nmapn

• (B). Heat maps

• (C). Network diagrams

• (D). Wireshark