Security 4

A network administrator is working on a project to deploy a load balancer in the company's cloud environment. Which of the following fundamental security requirements does this project fulfil?

• Privacy

• Integrity

• Confidentiality

• Availability

Answer explanation

Availability is the correct answer because deploying a load balancer enhances the availability of applications and services by distributing traffic, providing redundancy, and ensuring continued access to resources even in the event of server failures. This project directly supports the availability aspect of the security triad.

A systems administrator is changing the password policy within an enterprise environment and wants this update implemented on all systems as quickly as possible. Which of the following operating system security measures will the administrator most likely use?

• Deploying PowerShell scripts

• Pushing GPO update

• Enabling PAP

• Updating EDR profiles

Answer explanation

​Group Policy Objects (GPOs) provides an infrastructure for centralized configuration management of the Windows operating system and applications that run on the operating system. GPOs are a collection of settings that define what a system will look like and how it will behave for a defined group of computers or users.

Which of the following would be most useful in determining whether the long-term cost to transfer a risk is less than the impact of the risk?

• ARO

• RTO

• RPO

• ALE

• SLE

Answer explanation

ARO: Annual Rate of Occurrence

RTO: Recovery Time Objective

RPO: Recovery Point Objective

ALE: Annual Loss Expectancy

SLE: Single Loss Expectancy

In order to strengthen a password and prevent a hacker from cracking it, a random string of 36 characters was added to the password. Which of the following best describes this technique?

• Key stretching

• Tokenization

• Data masking

• Salting

Answer explanation

Salting is the correct answer because it involves adding a random string to a password before hashing to strengthen security. This technique effectively prevents precomputed hash attacks, making it a critical component of modern password protection strategies.

Salting is correct. Read the difference between Salting and Key Stretching on : https://library.mosse-institute.com/articles/2023/07/key-stretching-and-saltingm.html It explains a lot.

A technician is deploying a new security camera. Which of the following should the technician do?

• Configure the correct VLAN.

• Perform a vulnerability scan.

• Disable unnecessary ports.

• Conduct a site survey.

Answer explanation

D. Conduct a site survey. Before deploying a new security camera, conducting a site survey is crucial. A site survey helps determine the optimal placement of the camera, assesses environmental factors, ensures there are no blind spots, and verifies that the camera will effectively cover the desired area. It also helps in planning for network connectivity, power supply, and other logistical considerations.

A company is experiencing a web services outage on the public network. The services are up and available but inaccessible. The network logs show a sudden increase in network traffic that is causing the outage. Which of the following attacks is the organization experiencing?

• ARP poisoning

• Brute force

• Buffer overflow

• DDoS

Answer explanation

DDoS is the correct answer because the sudden increase in network traffic leading to a web services outage is characteristic of a Distributed Denial of Service attack. This type of attack overwhelms the target's resources, making services inaccessible, even though they are still operational. DDoS attacks specifically aim to disrupt access by flooding the target with excessive traffic, matching the symptoms described in the scenario.

Which of the following threat actors is the most likely to be motivated by profit?

• Hacktivist

• Insider threat

• Organized crime

• Shadow IT

An organization experiences a cybersecurity incident involving a command-and-control server. Which of the following logs should be analyzed to identify the impacted host? (Choose two.)

• Application

• Authentication

• DHCP

• Network

• Firewall

Answer explanation

In the context of a command-and-control (C2C) server, analyzing network and firewall logs is more effective for identifying the impacted host. These logs provide detailed information about network traffic, including connections to and from the C2C server, which can help pinpoint the affected devices. The two most relevant logs to analyze in this scenario would be: D. Network Network logs can provide insights into the traffic patterns and connections related to the C2C server. E. Firewall Firewall logs can help identify any unusual or unauthorized connections to the C2C server, aiding in the identification of the impacted host.

During a penetration test, a vendor attempts to enter an unauthorized area using an access badge. Which of the following types of tests does this represent?

• Defensive

• Passive

• Offensive

• Physical

A systems administrator uses a key to encrypt a message being sent to a peer in a different branch office. The peer then uses the same key to decrypt the message. Which of the following describes this example?

• Symmetric

• Asymmetric

• Hashing

• Salting

Answer explanation

Symmetric Encryption In this type of encryption, there is only one key, and all parties involved use the same key to encrypt and decrypt information.