Security Plus CompTIA

A company processes highly sensitive data and senior management wants to protect the sensitive data by utilizing classification labels. Which of the following access control schemes would be BEST for the company to implement?

• Discretionary

• Rule-based

• Role-based

• Mandatory

The CSIRT is reviewing the lessons learned from a recent incident. A worm was able to spread unhindered throughout the network and infect a large number of computers and servers. Which of the following recommendations would be BEST to mitigate the impacts of a similar incident in the future?

• Install a NIDS device at the boundary.

• Segment the network with firewalls.

• Update all antivirus signatures daily.

• Implement application blacklisting.

A network engineer needs to create a plan for upgrading the wireless infrastructure in a large office. Priority must be given to areas that are currently experiencing latency and connection issues. Which of the following would be the BEST resource for determining the order of priority?

• Nmap

• Heat Map

• Network DIagrams

• Wireshark

An organization is developing a plan in the event of a complete loss of critical systems and data. Which of the following plans is the organization MOST likely developing?

• Incident Response

• COmmunications

• Disaster Recovery

• Data Retention

A company is adopting a BYOD policy and is looking for a comprehensive solution to protect company information on user devices. Which of the following solutions would BEST support the policy?

• Mobile device management

• Full-device encryption

• Remote wipe

• Biometrics

A database administrator needs to ensure all passwords are stored in a secure manner, so the administrate adds randomly generated data to each password before string. Which of the following techniques BEST explains this action?

• Predictability

• Key STretching

• Salting

• Hashing

When selecting a technical solution for identity management, an architect chooses to go from an in-house to a third-party SaaS provider. Which of the following risk management strategies is this an example of?

• Acceptance

• Mitigation

• Avoidance

• Transference

Which of the following incident response steps involves actions to protect critical systems while maintaining business operations?

• Investigation

• Containment

• Recovery

• Lessons Learned

Which of the following disaster recovery tests is The LEAST time-consuming for the disaster recovery team?

• Tabletop

• Parallel

• Full Interruption

• Simulation

An organization suffered an outage and a critical system took 90 minutes to come back online. Though there was no data loss during the outage, the expectation was that the critical system would be available again within 60 minutes Which of the following is the 60-minute expectation an example of:

• MTBF

• RPO

• MTTR

• RTO