SEC+701 Practice test 2 (125 last #)

Which of the following describes a security alerting and monitoring tool that collects system, application, and network logs from multiple sources in centralized system?

• DLP

• SIEM

• SNMP

• IDS

Which of the following are cases in which an engineer should recommend the decommissioning

of a network device? (Select two).

• Moved from production to test environment

• Encryption level cannot meet organizational standards

• Moved to a different enterprise location

• Configured to use cleartext passwords

• Moved to an isolated enterprise segment

An adminstrator assists the legal and compliance team with insuring information about customer transactions is archived for the proper time period. Which of the following data policies is the adminstrator carrying out?

• Compromise

• Retention

• Analysis

• Transfer

• Inventory

An administrator helps legal and compliance ensure customer transaction information is archived for the proper time period. Which policy is being carried out?

• Inventory

• Retention

• Compromise

• Analysis

• Transfer

A systems administrator is working on a solution with the following requirements:

- Provide a secure zone.

- Enforce a company-wide access control policy.

- Reduce the scope of threats.

Which of the following is the systems administrator setting up?

• CIA

• Zero Trust

• Non-repudiation

• AAA

A security administrator needs a method to secure data in an environment that includes some

form of checks so that the administrator can track any changes. Which of the following should the

administrator set up to achieve this goal?

• GPO

• SPF

• FIM

• NAC

Which of the following is the phase in the incident response process when a security analyst

reviews roles and responsibilities?

• Preparation

• Recovery

• Lessons learned

• Analysis

A company is discarding a classified storage array and hires an outside vendor to complete the disposal. Which of the following should the company request from the vendor?

• Certification

• Inventory list

• Classification

• Proof of ownership

Which would be the best ways to ensure only authorized personnel can access a secure facility? (Select two)

• Video surveillance

• Fencing

• Access control vestibule

• Sign-in sheet

• Badge access

A company's marketing department collects, modifies, and stores sensitive customer data. The infrastructure team is responsible for securing the data while in transit and at rest. Which data role describes the customer?

• Processor

• Custodian

• Subject

• Owner