SEC+ 76-100

Which of the following is used to protect a computer from viruses, malware, and Trojans being installed and moving laterally across the network?

• IDS

• ACL

• EDR

• NAC

Which of the following should a security administrator adhere to when setting up a new set of firewall rules?

• Disaster recovery plan

• Incident response procedure

• Business continuity plan

• Change management procedure

A company prevented direct access from the database administrators’ workstations to the network segment that contains database servers. Which of the following should a database administrator use to access the database servers?

• Jump server

• RADIUS

• HSM

• Load balancer

An enterprise is trying to limit outbound DNS traffic originating from its internal network. Outbound DNS requests will only be allowed from one device with the IP address 10.50.10.25. Which of the following firewall ACLs will accomplish this goal?

• Access list outbound permit 0.0.0.0/0 0.0.0.0/0 port 53 Access list outbound deny 10.50.10.25/32 0.0.0.0/0 port 53

• Access list outbound permit 0.0.0.0/0 10.50.10.25/32 port 53 Access list outbound deny 0.0.0.0/0 0.0.0.0/0 port 53

• Access list outbound permit 0.0.0.0/0 0.0.0.0/0 port 53 Access list outbound deny 0.0.0.0/0 10.50.10.25/32 port 53

• Access list outbound permit 10.50.10.25/32 0.0.0.0/0 port 53 Access list outbound deny 0.0.0.0/0 0.0.0.0/0 port 53

Which of the following is the most likely outcome if a large bank fails an internal PCI DSS compliance assessment?

• Fines

• Audit findings

• Sanctions

• Reputation damage

A company needs to provide administrative access to internal resources while minimizing the traffic allowed through the security boundary. Which of the following methods is most secure?

• Implementing a bastion host

• Deploying a perimeter network

• Installing a WAF

• Utilizing single sign-on

A U.S.-based cloud-hosting provider wants to expand its data centers to new international locations. Which of the following should the hosting provider consider first?

• Local data protection regulations

• Risks from hackers residing in other countries

• Impacts to existing contractual obligations

• Time zone differences in log correlation

Which of the following vulnerabilities is associated with installing software outside of a manufacturer’s approved software repository?

• Jailbreaking

• Memory injection

• Resource reuse

• Side loading

An employee receives a text message that appears to have been sent by the payroll department and is asking for credential verification. Which of the following social engineering techniques are being attempted?

• Typosquatting

• Phishing

• Impersonation

• Vishing

• Smishing

A network manager wants to protect the company's VPN by implementing multifactor authentication that uses:

. Something you know

. Something you have

. Something you are

Which of the following would accomplish the manager's goal?

• Domain name, PKI, GeolP lookup

• VPN IP address, company ID, facial structure

• Password, authentication token, thumbprint

• Company URL, TLS certificate, home address