532 PT14

NO.332 Which of the following uses six initial steps that provide basic control over system security

by including hardware and software inventory, vulnerability management, and continuous

monitoring to minimize risk in all network environments?

• (A). ISO 27701

• (B). The Center for Internet Security

• (C). SSAE SOC 2

• (D). NIST Risk Management Framework

NO.333 A security analyst is hardening a network infrastructure. The analyst is given the following

requirements.

* Preserve the use of public IP addresses assigned to equipment on the core router.

* Enable "in transport 'encryption protection to the web server with the strongest ciphers.

Which of the following should the analyst implement to meet these requirements? (Select TWO).

• (A). Configure VLANs on the core router

• (B). Configure NAT on the core router

• (C). Configure BGP on the core router

• (D). Configure AES encryption on the web server

• (F). Enable TLSv2 encryption on the web server

NO.334 A security analyst is investigating a vulnerability in which a default file permission was set

incorrectly. The company uses non-credentialed scanning for vulnerability management.

Which of the following tools can the analyst use to verify the permissions?

• (A). ssh

• (B). chmod

• (C). 1s

• (D). setuid

NO.335 Which of the following would BEST identify and remediate a data-loss event in an enterprise

using third-party, web-based services and file-sharing platforms?

• (A). SIEM

• (B). CASB

• (C). UTM

• (D). EDR

NO.336 An organization wants to implement a third factor to an existing multifactor authentication.

The organization already uses a smart card and password. Which of the following would meet the

organization's needs for a third factor?

• (A). Date of birth

• (B). Fingerprints

• (C). PIN

• (D). TPM

NO.337 Which of the following is the purpose of a risk register?

• (A). To define the level or risk using probability and likelihood

• (B). To register the risk with the required regulatory agencies

• (C). To identify the risk, the risk owner, and the risk measures

• (D). To formally log the type of risk mitigation strategy the organization is using

NO.338 A security analyst discovers that a company username and password database was posted

on an internet forum.

The username and passwords are stored in plan text. Which of the following would mitigate the

damage done by this type of data exfiltration in the future?

• (A). Create DLP controls that prevent documents from leaving the network

• (B). Implement salting and hashing

• (C). Configure the web content filter to block access to the forum.

• (D). Increase password complexity requirements

NO.339 A company's cybersecurity department is looking for a new solution to maintain high

availability. Which of the following can be utilized to build a solution? (Select Two)

• (A). A stateful inspection

• (B). IP hashes

• (C). A round robin

• (D). A VLAN

• (E). A DMZ

NO.340 A security analyst needs to produce a document that details how a security incident

occurred, the steps that were taken for recovery, and how future incidents can be avoided. During

which of the following stages of the response process will this activity take place?

• A. Recovery

• B. identification

• C. Lessons Learned

• D. Preparation

NO.341 A new vulnerability in the SMB protocol on the Windows systems was recently discovered,

but no patches are currently available to resolve the issue. The security administrator is concerned tf

servers in the company's DMZ will be vulnerable to external attack; however, the administrator

cannot disable the service on the servers, as SMB is used by a number of internal systems and

applications on the LAN. Which of the following TCP ports should be blocked for all external inbound

connections to the DMZ as a workaround to protect the servers? (Select TWO).

• (A). 135

• (B). 139

• (C). 143

• (D). 161

• (F). 445