Security Quiz

A security administrator wants to detect a potential forged sender claim in tt-e envelope of an email. Which of thefollowing should the security administrator implement? (Select TWO).

• DNSSEC

• S/MIME

• MX record

• SPF

• DMARC

A security manager wants to transition the organization to a zero trust architecture. To meet this requirement, thesecurity manager has instructed administrators to remove trusted zones, role-based access, and one-timeauthentication. Which of the following will need to be implemented to achieve this objective? (Select THREE).

• Least privilege

• Policy automation

• Continuous validation

• VPN

• PKI

In a cloud environment, the provider offers relief to an organization's teams by sharing in many of the operationalduties. In a shared responsibility model, which of the following responsibilities belongs to the provider in a Paasimplementation?

• Application-specific data assets

• Application user access management

• Application-specific logic and code

• Application/platform software

An organization is looking to establish more robust security measures by implementing PKI. Which of thefollowing should the security analyst implement when considering mutual authentication?

• Perfect forward secrecy on both endpoints

• Shared secret for both endpoints

• Public keys on both endpoints

• A common public key on each endpoint

• A common private key on each endpoint

Which of the following BEST describes a common use case for homomorphic encryption?

• Processing data on a server after decrypting in order to prevent unauthorized access in transit

• Maintaining the confidentiality of data both at rest and in transit to and from a CSP for processing

• Transmitting confidential data to a CSP for processing on a large number of resources without revealing information

• Storing proprietary data across multiple nodes in a private cloud to prevent access by unauthenticated users

A security architect recommends replacing the company's monolithic software application with a containerizedsolution. Historically, secrets have been stored in the application's configuration files. Which of the followingchanges should the security architect make in the new system?

• Use a secrets management tool

• Save secrets in key escrow

• Store the secrets inside the Dockerfiles

• Run all Dockerfles in a randomized namespace

Which of the following describes the system responsible for storing private encryption/decryption files with athird party to ensure these files are stored safely?

• Key escrow

• TPM

• Trust models

• Code signing

Some end users of an e-commerce website are reporting a delay when browsing pages. The website uses TLS 1.2.A security architect for the website troubleshoots by connecting from home to the website and capturing tramc via Wire-shark. The security architect finds that the issue is the time required tovalidate the certificate. Which of the following solutions should the security architect recommend?

• Adding more nodes to the web server clusters

• Changing the cipher algorithm used on the web server

• Implementing OCSP stapling on the server

• Upgrading to TLS 1.3

The CI/CD pipeline requires code to have close to zero defects and zero vulnerabilities. The current process for anycode releases into production uses two-week Agile sprints. Which of the following would BEST meet therequirement?

• An open-source automation server

• A static code analyzer

• Trusted open-source libraries

• A single code repository for all developers

During a recent security incident investigation, a security analyst mistakenly turned offthe infected machine priorto consulting with a forensic analyst. upon rebooting the machine, a malicious script that was running as a background process was no longer present. As a result, potentially useful evidence was lost.Which of the following should the security analyst have followed?

• Order of volatility

• Chain of custody

• Verification

• Secure storage