Security+ 014124721425

A security manager is implementing MFA and patch management. What option should most effectively describe the control type and category?

• C. Detective

• A. Physical

• B. Managerial

• E. Preventative

• F. Technical

What option is the most effectively way to securely store an encryption key for a data set in a manner that allows multiple entities to access the key when needed?

• Public key infrastructure

• Open public ledger

• Public key encryption

• Key escrow

What option is the most important element when defining effective security governance?

• Discovering and documenting external considerations

• Developing procedures for employee onboarding and offboarding

• Assigning roles and responsibilities for owners, controllers, and custodians

• Defining and monitoring change management procedures

An employee receives a text message that appears to have been sent by the payroll department and is asking for credential verification. What option social engineering techniques are being attempted?

• A. Typosquatting

• B. Phishing

• C. Impersonation

• D. Vishing

• smishing

During a security incident, the security operations team identified sustained network traffic from a malicious IP address: 10.1.4.9. A security analyst is creating an inbound firewall rule to block the IP address from accessing the organization's network. What option fulfills this request?

• access-list inbound deny ig source 0.0.0.0/0 destination 10.1.4.9/32

• access-list inbound deny ig source 10.1.4.9/32 destination 0.0.0.0/0

• access-list inbound permit ig source 10.1.4.9/32 destination 0.0.0.0/0

• access-list inbound permit ig source 0.0.0.0/0 destination 10.1.4.9/32

An organization is evaluating new regulatory requirements associated with the implementation of corrective controls on a group of interconnected financial systems. What of the following is the most likely reason for the new requirement?

• To defend against insider threats altering banking details

• To ensure that errors are not passed to other systems

• To allow for business insurance to be purchased

• To prevent unauthorized changes to financial data

A systems administrator works for a local hospital and needs to ensure patient data is protected and secure. What option data classifications should be used to secure patient data?

• Private

• Critical

• Sensitive

• Public

What option alert types is the most likely to be ignored over time?

• True positive

• True negative

• False positive

• False negative

A technician is opening ports on a firewall for a new system being deployed and supported by a SaaS provider. What option is a risk in the new system?

• Default credentials

• Non-segmented network

• Supply chain vendor

• Vulnerable software

A security team created a document that details the order in which critical systems should be brought back online after a major outage. What option documents did the team create?

• Communication plan

• Incident response plan

• Data retention policy

• Disaster recovery plan