Security+4

Which of the following allows for the attribution of messages to individuals?

• Adaptive identity

• Non-repudiation

Which of the following is the best way to consistently determine on a daily basis whether security settings on servers have been modified?

• Automation

• Compliance checklist

Which of the following tools can assist with detecting an employee who has accidentally emailed a file containing a customer’s PII?

• SCAP

• DLP

An organization recently updated its security policy to include the following statement:
Regular expressions are included in source code to remove special characters such as $, |, ;. &, `, and ? from variables set by forms in a web application.
Which of the following best explains the security technique the organization adopted by making this addition to the policy?

• Identify embedded keys

• Input validation

A security analyst and the management team are reviewing the organizational performance of a recent phishing campaign. The user click-through rate exceeded the acceptable risk threshold, and the management team wants to reduce the impact when a user clicks on a link in a phishing message. Which of the following should the analyst do?

• Place posters around the office to raise awareness of common phishing activities.

• Update the EDR policies to block automatic execution of downloaded programs.

Which of the following has been implemented when a host-based firewall on a legacy Linux system allows connections from only specific internal IP addresses?

• Compensating control

• Network segmentation

The management team notices that new accounts that are set up manually do not always have correct access or permissions.
Which of the following automation techniques should a systems administrator use to streamline account creation?

• Guard rail script

• User provisioning script

A company is planning to set up a SIEM system and assign an analyst to review the logs on a weekly basis. Which of the following types of controls is the company setting up?

• Corrective

• Detective

A systems administrator is looking for a low-cost application-hosting solution that is cloud-based. Which of the following meets these requirements?

• Serverless framework

• Type 1 hypervisor

A security operations center determines that the malicious activity detected on a server is normal. Which of the following activities describes the act of ignoring detected activity in the future?

• Tuning

• Aggregating