532 PT9

NO.205 A bad actor tries to persuade someone to provide financial information over the phone in

order to gain access to funds. Which of the following types of attacks does this scenario describe?

• (A). Vishing

• (B). Phishing

• (C). Spear phishing

• (D). Whaling

NO.206 A security analyst discovers several .jpg photos from a cellular phone during a forensics

investigation involving a compromised system. The analyst runs a forensics tool to gather file

metadata. Which of the following would be part of the images if all the metadata is still intact?

• (A). The GPS location

• (B). When the file was deleted

• (C). The total number of print jobs

• (D). The number of copies made

NO.207 During a routine scan of a wireless segment at a retail company, a security administrator

discovers several devices are connected to the network that do not match the company's naming

convention and are not in the asset Inventory. WiFi access Is protected with 255-Wt encryption via

WPA2. Physical access to the company's facility requires two-factor authentication using a badge and

a passcode Which of the following should the administrator implement to find and remediate the

Issue? (Select TWO).

• (A). Check the SIEM for failed logins to the LDAP directory.

• (B). Enable MAC filtering on the switches that support the wireless network.

• (C). Run a vulnerability scan on all the devices in the wireless network

• (D). Deploy multifactor authentication for access to the wireless network

• (E). Scan the wireless network for rogue access points.

NO.209 Some laptops recently went missing from a locked storage area that is protected by keyless

RFID-enabled locks. There is no obvious damage to the physical space. The security manager

identifies who unlocked the door, however, human resources confirms the employee was on vacation at the time of the incident. Which of the following describes what MOST likely occurred?

• (A). The employee's physical access card was cloned.

• (B). The employee is colluding with human resources

• (C). The employee's biometrics were harvested

• (D). A criminal used lock picking tools to open the door.

NO.210 During an asset inventory, several assets, supplies, and miscellaneous items were noted as

missing. The security manager has been asked to find an automated solution to detect any future

theft of equipment. Which of the following would be BEST to implement?

• (A). Badges

• (B). Fencing

• (C). Access Control Vestibule

• (D). Cameras

NO.211 An end user reports a computer has been acting slower than normal for a few weeks, During

an investigation, an analyst determines the system 3 sending the users email address and a ten-digit

number ta an IP address once a day. The only resent log entry regarding the user's computer is the

following:

Which of the following is the MOST likely cause of the issue?

• (A). The end user purchased and installed 2 PUP from a web browser.

• (B). 4 bot on the computer is rule forcing passwords against a website.

• (C). A hacker Is attempting to exfilltrated sensitive data.

• (D). Ransomwere is communicating with a command-and-control server.

NO.212 A network engineer needs to create a plan for upgrading the wireless infrastructure in a

large office Priority must be given to areas that are currently experiencing latency and connection

issues. Which of the following would be the BEST resource for determining the order of priority?

• (A). Nmapn

• (B). Heat maps

• (C). Network diagrams

• (D). Wireshark

NO.213 Which of the following BEST describes the MFA attribute that requires a callback on a

predefined landline?

• (A). Something you exhibit

• (B). Something you can do

• (C). Someone you know

• (D). Somewhere you are

NO.214 Which of the following should be monitored by threat intelligence researchers who search

for leaked credentials?

• (A). Common Weakness Enumeration

• (B). OSINT

• (C). Dark web

• (D). Vulnerability databases

NO.215 Which of the following would cause a Chief Information Security Officer (CISO) the MOST

concern regarding newly installed Internet-accessible 4K surveillance cameras?

• (A). An inability to monitor 100%, of every facility could expose the company to unnecessary risk.

• (B). The cameras could be compromised if not patched in a timely manner.

• (C). Physical security at the facility may not protect the cameras from theft.

• (D). Exported videos may take up excessive space on the file servers.