Richard’s company processes credit cards and they are required to be compliant with PCI-DSS. If his company has a breach of card data, what type of disclosure will they have to provide?

Rhonda would like to build some scripts that detect malware beaconing behavior. Which one of the following isn’t a typical means of identifying malware behavior on a network?

What security control provides Windows administrators with an efficient way to manage system configuration settings across a large number of devices?

Tyler needs to implement a security control designed to detect fraudulent cases that happen, regardless of the presence of other security controls. Which of the following is best suited to meet his needs?

The service desk has been receiving a large number of complaints from external users that a web application is responding slow to requests and frequently receives a “connection timed out” error when they attempt to submit information into the application. What software development best practice should have been implemented in order to have prevented this issue from occurring?

What SDLC model emphasizes individuals and interactions over processes and tools, customer collaboration over contract negotiation, and working software over comprehensive documentation?

Of all the items listed, which element is least likely to be found in a data retention policy?

Which party in a federation provides services to members of the federation?

What secure coding practice helps to ensure characters like <, >, /, and ‘ are not accepted from the data provided by users?

You have been called into the Chief Technology Officer’s (CTO) office and been asked for a recommendation concerning network monitoring services for the company’s intranet. The CTO requests that your solution have the capability to monitor all traffic to and from the network’s gateway and have the ability to block certain types of content. What solution should you recommend?

Which authentication protocol was designed by Cisco to provide authentication, authorization, and accounting services?

Charlotte is working on troubleshooting a network issue that involves connectivity. She would like to determine the path where packets flow when following her from her system to a remote host. What tool is best to assist with this task?

Your organization wants to update its Acceptable User Policy (AUP) to incorporate its newly implemented password standard that requires the sponsored authentication of guest wireless devices. What should be added to the AUP to support this new requirement?

An organization uses Acunetix for software testing. Which of the issues is Acunetix most likely to detect?

Marie would like to deploy EMET (Microsoft Enhanced Mitigation Experience Toolkit) to secure her organization’s systems. She wants to use this tool to prevent buffer overflow attacks from specific applications. Which feature would best assist with this?

A cyber security analyst needs to pick a tool in order to be able to identify open ports and services on a host along with the version of the application that is associated with the ports and services. They have decided to choose a command line tool. What tool should they choose?

What phase of the software development lifecycle is sometimes known as the acceptance, installation, and deployment phase?

Jason is designing an authentication system upgrade for his organization. The organization currently only uses password-based authentication and has been suffering a series of phishing attacks. Jason would like to achieve multi-factor authentication in the new system design. Which one of the following authentication techniques would be most appropriate to add to the current password-based system?

What should a vulnerability report include if a cybersecurity analyst wants it to reflect the assets scanned accurately?