532 PT10

NO.231 The Chief Information Security Officer wants to pilot a new adaptive, user-based

authentication method. The concept Includes granting logical access based on physical location and

proximity. Which of the following Is the BEST solution for the pilot?

• (A). Geofencing

• (B). Self-sovereign identification

• (C). PKl certificates

• (D). SSO

NO.232 A company needs to centralize its logs to create a baseline and have visibility on its security

events. Which of the following technologies will accomplish this objective?

• (A). Security information and event management

• (B). A web application firewall

• (C). A vulnerability scanner

• (D). A next-generation firewall

NO.233 A system that requires an operation availability of 99.99% and has an annual maintenance

window available to patching and fixes will require the HIGHEST:

• (A). MTBF

• (B). MTTR

• (C). RPO

• (D). RTO

NO.234 Which of the following is MOST likely to contain ranked and ordered information on the

likelihood and potential impact of catastrophic events that may affect business processes and

systems, while also highlighting the residual risks that need to be managed after mitigating controls

have been implemented?

• (A). An RTO report

• (B). A risk register

• (C). A business impact analysis

• (D). An asset value register

• (E). A disaster recovery plan

NO.235 A security analyst has been asked to investigate a situation after the SOC started to receive

alerts from the SIEM. The analyst first looks at the domain controller and finds the following events:

To better understand what is going on, the analyst runs a command and receives the following

output:

Based on the analyst's findings, which of the following attacks is being executed?

• (A). Credential harvesting

• (B). Keylogger

• (C). Brute-force

• (D). Spraying

NO.236 A SOC is currently being outsourced. Which of the following is being used?

• (A). Microservices

• (B). SaaS

• (C). MSSP

• (D). PaaS

NO.237 The website http://companywebsite.com requires users to provide personal information including

security responses, for registration. which of the following would MOST likely cause a date breach

• (A). LACK OF INPUT VALIDATION

• (B). OPEN PERMISSIONS

• (C). UNSCECURE PROTOCOL

• (D). MISSING PATCHES

NO.238 A security assessment found that several embedded systems are running unsecure

protocols. These Systems were purchased two years ago and the company that developed them is no

longer in business Which of the following constraints BEST describes the reason the findings cannot

be remediated?

• (A). inability to authenticate

• (B). Implied trust

• (C). Lack of computing power

• (D). Unavailable patch

NO.239 A network administrator would like to configure a site-to-site VPN utilizing iPSec. The

administrator wants the tunnel to be established with data integrity encryption, authentication and

anti- replay functions Which of the following should the administrator use when configuring the VPN?

• (A). AH

• (B). EDR

• (C). ESP

• (D). DNSSEC

NO.240 A new vulnerability in the SMB protocol on the Windows systems was recently discovered,

but no patches are currently available to resolve the issue. The security administrator is concerned

that servers in the company's DMZ will be vulnerable to external attack; however, the administrator

cannot disable the service on the servers, as SMB is used by a number of internal systems and

applications on the LAN Which of the following TCP ports should be blocked for all external inbound

connections to the DMZ as a workaround to protect the servers? (Select TWO).(C). 143

• (A). 135

• (B). 139

• (C). 143

• (D). 161

• (E). 443