Security+ 014825401623

Which of the following can be used to compromise a system that is running an RTOS?

• Cross-site scripting

• Memory injection

• Replay attack

• Ransomware

An employee recently resigned from a company. The employee was responsible for managing and supporting weekly batch jobs over the past five years. A few weeks after the employee resigned, one of the batch jobs failed and caused a major disruption. Which of the following would work best to prevent this type of incident from reoccurring?

• Job rotation

• Retention

• Outsourcing

• Separation of duties

A security analyst has determined that a security breach would have a financial impact of $15,000 and is expected to occur twice within a three-year period. Which of the following is the ALE for this risk?

• $7,500

• $10,000

• $15,000

• $30,000

A service provider wants a cost-effective way to rapidly expand from providing internet links to managing them. Which of the following methods will allow the service provider to best scale its services while maintaining performance consistency?

• Escalation support

• Increased workforce

• Baseline enforcement

• Technical debt

Which of the following should a company use to provide proof of external network security testing?

• Business impact analysis

• Supply chain analysis

• Vulnerability assessment

• Third-party attestation

A database administrator is updating the company's SQL database, which stores credit card information for pending purchases. Which of the following is the best method to secure the data against a potential breach?

• A. Tokenization

• B. Masking

• C. Obfuscation

• D. Hashing

A certificate authority needs to post information about expired certificates. Which of the following would accomplish this task?

• TPM

• CRL

• PKI

• CSR

Which of the following is a feature of a next-generation SIEM system?

• Virus signatures

• Automated response actions

• Security agent deployment

• Vulnerability scanning

Which of the following describes the difference between encryption and hashing?

• A. Encryption protects data in transit, while hashing protects data at rest.

• B. Encryption replaces cleartext with ciphertext, while hashing calculates a checksum.

• C. Encryption ensures data integrity, while hashing ensures data confidentiality.

• D. Encryption uses a public-key exchange, while hashing uses a private key.

Company A jointly develops a product with Company B, which is located in a different country. Company A finds out that their intellectual property is being shared with unauthorized companies. Which of the following has been breached?

• SLA

• AUP

• SOW

• MOA