security test

You’ve hired a third-party to gather information about

your company’s servers and data. The third-party will not

have direct access to your internal network but can gather

information from any other source.

Which of the following would BEST describe this

approach?

• Backdoor testing

• Passive footprinting

• OS fingerprinting

• Partially known environment

Answer explanation

Which of these protocols use TLS to provide secure

communication? (Select TWO)

• HTTPS

• SSH

• FTPS

• SNMPv2

• DNSSEC

Answer explanation

Which of these threat actors would be MOST likely to

attack systems for direct financial gain?

• Organized crime

• Hacktivist

• Nation state

• Competitor

Answer explanation

A security incident has occurred on a file server. Which of

the following data sources should be gathered to address

file storage volatility? (Select TWO)

• Partition data

• Kernel statistics

• ROM data

• Temporary file systems

Answer explanation

An IPS at your company has found a sharp increase

in traffic from all-in-one printers. After researching,

your security team has found a vulnerability associated

with these devices that allows the device to be remotely

controlled by a third-party. Which category would BEST

describe these devices?

• IoT

• RTOS

• MFD

• SoC

Answer explanation

Which of the following standards provides information

on privacy and managing PII?

• ISO 31000

• ISO 27002

• ISO 27701

• ISO 27001

Answer explanation

Elizabeth, a security administrator, is concerned about

the potential for data exfiltration using external storage

drives. Which of the following would be the BEST way

to prevent this method of data exfiltration?

• Create an operating system security policy to

  prevent the use of removable media

• Monitor removable media usage in host-based

  firewall logs

• Only allow applications that do not use

  removable media

• Define a removable media block rule in the UTM

Answer explanation

A CISO (Chief Information Security Officer) would

like to decrease the response time when addressing

security incidents. Unfortunately, the company does not

have the budget to hire additional security engineers.

Which of the following would assist the CISO with this

requirement?

• ISO 27701

• PKI

• IaaS

• SOAR

Answer explanation

• Restrict login access by IP address and

  GPS location

• Conduct monthly permission auditing

• Consolidate all logs on a SIEM

• Archive the encryption keys of all disabled

  accounts

• Enable time-of-day restrictions on the

  authentication server

Answer explanation

• The victim's IP address is 136.127.92.171

• A download was blocked from a web server

• A botnet DDoS attack was blocked

• The Trojan was blocked, but the file was not

Answer explanation