A security administrator is looking for a way to know when people approach any of several secure areas. The method must be active 24-hours a day. They want to keep recurring expenses related to the solution to a minimum.

What should the administrator use?

An administrator sets up a VM for testing different versions of an application. The administrator wants to be able to return to the baseline state as quickly as possible between each test.

What should the administrator do?

An organization prepares to deploy specialized medical systems that will remotely collect and monitor health information from each patient's home. The remote systems have limited hardware capabilities, and patients should not be required to purchase additional equipment or perform complex configurations. What should the organization do to ensure that PHI is protected?

A security administrator is looking for a way to know when people approach any of several secure areas. The method must be active 24-hours a day. They want to keep recurring expenses related to the solution to a minimum.

What should the administrator use?

An administrator sets up a VM for testing different versions of an application. The administrator wants to be able to return to the baseline state as quickly as possible between each test.

What should the administrator do?

Which server acts as a mirror of the real environment and is used by developers to test and finalize new software prior to rollout?

What are two advantages of implementing a vendor diversity policy? (Choose two.)

A server application produces plain text output. The output needs to be encrypted before being delivered to local and remote client computers. Output varies in length depending on the client request.

The processing requirements and the volume of data sent should be kept to a minimum.

What type of cipher should be used?

An organization deploys web services on a custom, hardened OS. The organization plans to move most of its operations to the cloud. Which of the following models should the organization select?

To reduce management complexity and increase operational security, an organization plans to deploy AAA services. Which of the following platforms or technologies will help the organization meet this goal?

An organization plans to contract with a provider for a disaster recovery site that will host server hardware. When the primary data centers fail, data will be restored, and the secondary site will be activated. Costs must be minimized. Which type of disaster recovery site sh0ould the organization deploy?

Which of the following is also known as a Type 1 hypervisor?

An organization recently deployed a biometric authentication system. Which of the following should the organization use as its primary tuning metric?

Which of the following can be used to prevent external electrical fields from affecting sensitive equipment?

A company has an office on the fifth floor of a building in a city that is prone to earthquakes. Earthquakes have been identified as the most important risk to mitigate.

Which risk mitigation controls would be most important when ensuring employee safety? (Choose three.)

Which key is used to encrypt data in an asymmetric encryption system?

Which type of system is MOST susceptible to costly and possibly catastrophic failures caused by operator errors?

Which process ensures that code vulnerabilities can be patched and updated code placed into production as quickly as possible?

A company is designing its disaster recovery plan. The company wants potential down time after a disaster kept to a minimum. Data loss and reposting requirements should also be kept to a minimum. The ability to physically secure the site and prevent any outside entry is a primary concern.

What is the BEST disaster recovery site option?

An organization determines that their working production control is susceptible to attack. What should the organization implement to mitigate the risk of compromised code integrity?

A company uses an internet of things (IoT) processing solution that uses a distributed architecture with a large number of distributed nodes to support smart buildings. Short-term analytic processing occurs at the local area network (LAN) level, providing quick results and low latency data transfers to gateway devices. Processing can occur when no internet bandwidth is immediately available.

Which computer model does this describe?

Which of the following statements describes a benefit of implementing stored procedures for a web app?

A server application is currently under development. It has been discovered that some errors, such as a divide by zero error, can leave the application running in an unstable condition. The application needs to respond more appropriately to errors and generate an error message when they occur.

What should the developers implement? (Choose the BEST answer.)

A company needs to ensure that, if anyone enters the server room after hours, the doors are locked and cannot be opened from the inside. The company wants to minimize the recurring costs related to the solution.

What should the company install?

Which is NOT a vulnerability associated with embedded systems?

A network administrator backs up the server by using an incremental backup strategy. He uses seven tapes, one tape per day, and he performs the backup at the end of each business day. He does a full backup on Friday and Tuesday and an incremental on the other days (Sunday, Monday, Wednesday, Thursday and Saturday).

The server crashes on Sunday morning before the opening of business.

How many tapes will he use to perform the restore on Sunday?

A company is designing and developing an automated authentication system based on biometric attributes. One of the goals is to keep the authentication process as transparent and unobtrusive to employees as possible. The company installed CCTV cameras throughout its corporate campus. Images are fed through an artificial intelligence (AI) analysis system for employee identification. Human operators provide feedback to assist with machine learning and improve accuracy.

Which biometric attributes are BEST suited to this application? (Select two.)

A security administrator discovers that company confidential information is being encoded into graphics files and sent to a destination outside of the company.

This is an example of which kind of cryptography?

Which are valid examples of multifactor MFA requirements? (Choose two.)

A company needs to set up two-factor authentication for a cloud-based application. The authentication should include a one-time use, limited time password that is delivered to the user through the Google Authenticator mobile app. The password should be based on a shared key and the current date and time. What type of authentication should the company use?

An organization has migrated its primary application from a monolithic stack to a microservices architecture. Which of the following is the primary benefit of this migration?

What is an advantage of implementing a policy of control diversity in a network?

A company is concerned about users sending sensitive information to recipients outside of the network. This is a concern due to potential insider threats and the need to meet stringent privacy requirements. What should the company implement to help prevent this?

Which statement describes a primary benefit provided by MFA?

Which of the following physical controls is the best option for mitigating tailgating attacks?

The administrator deploys three web servers, all hosting the same web application and data, on his company's perimeter network. The administrator implements load balancing through the use of a load balancer.

This is BEST described as an example of which resiliency strategy?

A company is deploying IoT devices on its production network. What are two vulnerabilities that can place the network at greater risk?

What is the role of OWASP in software development?

To protect sensitive PHI, an organization plans to substitute random characters for original data, while maintaining the data's format. Which of the following technologies or methods should they use?

An organization plans to deploy remote IoT devices that will monitor environmental conditions. Due to processing constraints, the devices do not support PKI, but the organization is concerned that stored secrets might be easily compromised if a device is stolen. Which of the following can be used to mitigate this risk?

A company's internal network has experienced several attempted attacks from the Internet. The Administrator needs to collect as much information about the attackers and their attack methods as possible. The administrator should minimize risk to the internal network.

What should the administrator use?

Which of the following are block cipher modes? (Choose three)

A company recently started using an agile development methodology and is making extensive use of automation in testing and in managing the development and deployment process.

The company uses a software engineering practice where development is completed in incremental chunks and held in a staging environment until manually released.

What is this an example of?

A company wants to create a secure tunnel between two sites. Which set of protocols will offer the highest level of security and efficiency? Choose the BEST answer.

A company has a databases that is used to store product inventory. The cost to the company is very high if the database is not available.

Which two technology controls could be used to improve the database's availability? (Choose two.)

The company must ensure business continuity through use of an alternate processing location that supports its standard business processes in case of failure at the main site.

The company must have an alternate location available with the facilities infrastructure to support business operations. Costs must be kept to a minimum.

The company must be able to return to full operations as quickly as possible after a catastrophic failure. The site will maintain copies of all current backups.

A user arrives at a datacenter and is challenged by three authentication methods as shown in the exhibit. What is the BEST description of the multifactor authentication policy that is in use?

Which of the following best describes a digital signature?

Your organization has developed a fault-tolerant design to help ensure business continuity in case of a disaster. The disaster recovery site has mission-critical hardware already installed and connectivity already established. Data backups of critical data are on hand, but they may be up to a week old.

This is an example of which of the following?

This model supplies an appropriate environment for developing, testing, and deploying applications. The provider is responsible for the operating system, development environment, and other resources.

This model gives the user the most direct control over the environment. The subscriber is responsible for maintaining the operating system and other resources.

This model offers access to applications on a subscription or pay-as-you-go basis. The provider is responsible for upgrades and all management requirements except user preference settings.

What should be used to ensure non-repudiation on outgoing emails?

An organization deploys a MODBUS based SCADA system to manage production machinery. Which of the following methods should be the organization's first choice for securing the new system?

A subscription to a productivity application allows users in a company to create and share documents. The service is not hosted on a dedicated server.

What two things is this an example of? (Choose two)

A security administrator is designing physical security for network servers. The design requirements call for the servers to be kept in a locked room with limited physical access. The administrator wants to ensure that physical access is controlled as tightly as possible and prevent unauthorized access.

What should the security analyst do?

A security administrator is looking for a method to manage access to a secure area. They want to allow entry through a locked gate that unlocks automatically and track individuals going into and out of the area. Which method should the administrator use?

A system has six 100 GB hard disks available for data storage. Which RAID configuration will provide the most available storage with fault tolerance?

Which cloud service model provides servers, storage, and network infrastructure, but not operating systems or applications

A company deploys a highly advanced HVAC system in a datacenter. Which two security measures should a security specialist recommend for that system? (Choose two.)

A security consultant is brought in to test recent changes made to a company's network by its in-house security personnel. The consultant discovered a file named passwd.csv that was located at the disk root on a web server deployed in the company's perimeter network. The web server runs Linux.

What is the MOST likely reason for this file?