What kind of policy governs the removal of sensitive data and credentials when a user device is no longer used for company business?

You’ve been asked to provide security advice for a custom-robotics project using an off-the-shelf single-board computer and a specialized Linux operating system. What technology should you research first?

What connection type is very similar to Bluetooth but used by more specialized devices, such as sensors and fitness trackers?

Which of the following are essential security steps on all mobile devices?

Each correct answer represents a complete solution. Choose two.

Which of the following key management solutions would be best for a multinational organization with a strong multi-cloud presence?

Which of the following is an integrated circuit with a logical structure that can be reprogrammed after manufacture, in contrast to the pre-printed logic functions found in a microprocessor or ASIC?

Which Windows encryption tool can protect the entire system volume?

What connection type is very similar to Bluetooth but is used by more specialized devices?

What kind of policy governs a set process for how an employee needs to prepare a device to join the program?

Question 11 :Mark wants to securely erase the contents of a tape used for backups in his organization's tape library. What is the fastest secure erase method will he use that will allow the tape to be reused?

In which of the following can the employee choose between a list of devices the company has approved for security features and support?

Which standard do you need to use when handling credit card data?

What potential security risk does an SD card pose that a USB flash drive does not?

Question 15 :Privacy-enhancing technologies are part of a larger principle by which the amount of PII, PHI, or other sensitive private data that is collected and stored is carefully limited. What is the "umbrella" term under which many other terms regarding privacy enhancement fall?

Which of the following technologies helps to control what information can be exfiltrated from internal users and systems and what form such data can take?

What was the first version of Windows to include real-time antivirus scanning?

You are developing an application for sale to the public. You want to assure your users that the application they receive actually came from you. What technique will you use to provide this assurance?

What kind of malware can spread through a network without any human interaction?

Among the options listed, which mitigation technique is known most for increasing security at the expense of flexibility?

Which of the following environments is a prime vector for fileless malware in a Windows environment?

Crypto-malware is a type of what sort of malware?

In terms of data governance policies, what is the relationship between the terms data custodian and data steward?

A company decides to invest in embedded systems to improve security by limiting the number of components used in various critical and sensitive systems. Which of the following would make it more difficult to justify embedded systems in certain cases?

It has come to your attention that a newly created sensitive document is making the rounds among authorized users in the company. Which enterprise utility can you adjust the configuration of to reduce the likelihood that the document will fall into the wrong hands in a readable format?

What kind of malware replicates itself by exploiting system vulnerabilities?

What data management model assists professionals in decision making with regard to the creation of policy based on the convergence of data security and privacy, focusing on such aspects as to how it's attained and classified, how it's used and stored, and how it's archived and destroyed?

Which of the following is a form of ransomware?

The VP of human resources has put you in charge of securing a critical server for the department. You’ll be hardening its operating system according to company policies and regularly checking configuration and system logs. In asset management terms, what role have you taken on?

Which privacy-enhancing technology cannot be reversed and, yet, has the distinguishing capability of either replacing private data in the database or retaining it and replacing it only when each record is read from the database, usually while keeping the format and structure of the fields it impacts?

What technology uses the TPM to store hashes of signed boot files for comparison the next time the system boots and for export in a quote for remote attestation?

A user complains that every time they open their Internet browser, it no longer goes to their preferred home page, and advertisements pop up in dialog boxes that they have to close. What is the likely cause?

What cryptographic tool is commonly built into a motherboard?

Your organization has a degausser in the basement. What media can it securely destroy? Each correct answer represents a complete solution. Choose two.

Among the options listed, which mitigation technique is known most for increasing security at the expense of flexibility?

A host on the network is potentially infected with a novel virus, and you don't want it to spread while you study it. You've decided that network segmentation won't be effective enough and you'd prefer to isolate the host. Which of the following will best achieve that goal?

Which technology or category of products was developed to allow agents installed on hosts to report a variety of measurable statistics for central processing and analysis?

Which of the following are essential security steps on all mobile devices?

Each correct answer represents a complete solution. Choose two.

It has come to your attention that a newly created sensitive document is making the rounds among authorized users in the company. Which enterprise utility can you adjust the configuration of to reduce the likelihood that the document will fall into the wrong hands in a readable format?

What is an example of IP theft?

What kind of application centrally manages security policy and settings on all company mobile devices?

While analyzing the shortcomings in the operation of the enterprise's NIDS, you discover that in its current mode of operation, only known attacks are being reported. What is recommended to enable detection of previously unknown attack methods through the use of artificial intelligence (AI)?

Steffie wants to select a mobile device deployment method that provides employees with devices that are company-issued and supported, but employees can use them for personal reasons too. Which of the following is the most likely culprit?

Which standard do you need to use when handling credit card data?

Which of the following is a proprietary wireless standard maintained by Silicon Labs and supports throughput up to 40 kbps over distances of 10-100m between nodes?

Which privacy-enhancing technology performs a reversible substitution of PII, storing the private data elsewhere, reducing the likelihood that a breach of the records containing the non-private substituted information will lead to legal jeopardy for the organization entrusted with the PII?

Which privacy-enhancing technology neither alters original PII in a database nor creates a separate version in a new database and instead provides a representation of the sensitive data to the viewer in its original format, often replacing all parts of the sensitive information with the same character?

Which of the following security risks is least important to address in enterprise patch management systems?

Which of these statements about bash scripts is accurate?

Which of the following tools is used to sandbox suspected malware and report on what occurred during its execution?

Which of the following statements is correct regarding BitLocker?

You're classifying data for a private company which uses four classification levels. Under what classification does PHI most likely fall?

Which authentication method allows a trusted system to vouch for the secure hardware and software configuration of another?

What data management model assists professionals in decision making with regard to the creation of policy based on the convergence of data security and privacy, focusing on such aspects as to how it's attained and classified, how it's used and stored, and how it's archived and destroyed?

What kind of malware replicates itself by exploiting system vulnerabilities?

You’ve taken up a contract helping to upgrade the existing industrial control network for an oil refinery. What network type should you expect to work with?

Which mobile deployment model allows users to carry a single mobile device for business and personal use while allowing the enterprise to retain ownership of, and control over, the selection of devices on which support staff must be trained and skilled?

Which of the following enterprise mobile deployment models introduces the greatest amount of risk for the implementing organization?

Who among the following is a system administrator responsible for creating and enforcing the technical controls regarding access to data, under the direction of its owner?

What MDM features allow the administrator to silently update a corporate app and its content on mobile devices in the background?

Each correct answer represents a part of the solution. Choose two

Which of the following delivers advertisements to the infected system, usually within a browser or other application windows?

You want to use your Android phone to store and manage cryptographic certificates. Which type of solution will you choose to do this using secure hardware?

You’ve traced some anomalous network activity infecting the whole department’s computers by stealing information. They're installed as add-ons with legitimate free software applications by popular download sites. What kind of malware is it?

A company configures workstations only to run software on an approved list. What is this an example of?

Question 79 :You’ve traced some anomalous network activity to malware that’s infected a whole department’s computers. The computers are processing a distributed task using spare CPU cycles, communicating with a remote server, and sending emails to random targets. What kind of malware is it?

Why might an administrator decide to employ an enterprise MDM solution to deny support for USB OTG on mobile devices?

What is the most common concern with regard to residential IoT devices and technologies?

Which of the following are differences between SED and non-SED FDE?

Each correct answer represents a complete solution. Choose two.

Your organization has a degausser in the basement. What media can it securely destroy? Each correct answer represents a complete solution. Choose two.

What potential security risk does an SD card pose that a USB flash drive does not?