You are an administrator for a college that has 10 intranet web servers, and you need to install an X509 certificate so that they can support HTTPS. You need to use the solution that is the most cost-effective. Which of the following will you use for the certificates?

A group of chartered accountants visited the website belonging to their institution last Friday and were attacked by malware. What type of attack were they the victim of?

A cybersecurity analyst notices the following information in one of the log files on the company web server:

GET http://www.website.com.br/get-files../../../..etc/ passwd 

What type of attack has the analyst just discovered?

Which of the following threat intelligence sources is likely to provide much more accurate data?

A cybersecurity administrator wants to add comments to a log file that they are monitoring. Which tool is best for this?

A cybersecurity analyst has noticed a suspicious transaction on the server that holds the financial data. The output from the log file shows the following:

Get http://yourbank.com/transfer.do?acctnum=087646958&amount+80000 HTTP 1.1

Get http://yourbank.com/transfer.do?acctnum=087646958&amount+200000 HTTP 1.1

Get http://yourbank.com/transfer.do?acctnum=087646958&amount+25000 HTTP 1.1

Get http://yourbank.com/transfer.do?acctnum=087646958&amount+10000 HTTP 1.1

What type of attack has the analyst just discovered?

A cybersecurity team has been attacked by a group of hackers from the internet. The cybersecurity team wishes to find all of the email addresses of this group. Which tool would be the best for this?

Which of the following tools can be used for banner grabbing? (Select all that apply)

A cybersecurity analyst has just finished reading the monthly release from a security advisory. They have now started searching the log files on all of the database servers. What task are they completing?

A vendor has stopped selling a product, but they still sell a limited number of replacement parts. Which of the following describes this scenario?

A security administrator needs to implement secure authentication between two car manufacturers who are going to work on a joint venture. Which of the following should they adopt?

Which of the following regulations deals with credit card purchases and

financial transactions?

Which of the following can be used to protect data stored on mobile telephones? Select three.

You are the security administrator for the British secret service. What type of access method will you use for secret and top-secret data?

John goes to a sports website and gets the following error: THIS WEBSITE CANNOT BE TRUSTED. What two actions does the website administrator need to take to resolve this error? Choose two.

You are the security administrator for a large multinational company, and you have read a security bulletin that mentioned that the CRL for certificate validation has a vulnerability. When you measure the response time, it seems to be going slow. Which of the following will you implement so that faster validation occurs?

A security administrator discovers that an attacker used a compromised host as a platform for launching attacks deep in a company's network. Which of the following best describes this type of attack?

A security administrator has noticed the following output collected by the SIEM system: Pinging Server 1 with 45,000 bytes of data:

Reply from 192.0.0.1: bytes=45000 time<1ms TTL=128

Reply from 192.0.0.1: bytes=45000 time<1ms TTL=128

Reply from 192.0.0.1: bytes=45000 time<1ms TTL=128

Reply from 192.0.0.1: bytes=45000 time<1ms TTL=128

What type of attack has been detected?

During automation, which of the following is used to identify failures by an application so that remedial action can be taken? Select the best option.

A large company is looking to purchase a cybersecurity company and would like a very detailed report about the security controls, in particular, the handling of data, ensuring it is confidential. What reports would the large company want to read so that it can make a good decision on whether to buy or not?

You are a security administrator for a large multinational company, and you have recently removed credit card details from a data field. These are now being held by a payment provider that returns to you a serial number to replace the data. What have you just implemented?

The network administrator is going to set up a VPN that ensures that both the header and payload are encrypted. What did the security analyst recommend?

You are the CEO of a large multinational company and you are looking to move to the cloud. Which of the following will help you assess the overall risk of a cloud provider?

The security administrator is going to open a risk register for the company. What will be recorded in the risk register?

An auditor made a recommendation in an annual audit last year that an embedded device be patched immediately. A year later, a second audit made the same recommendation and noted the fact that the outcomes from the last audit had not been adhered to. What is the reason that the patching has not been carried out? Select the most likely reason.

The IT manager is designing a BIA plan and is calculating the amount of time in a disaster recovery system that the company can operate without its data. After this point, the company cannot operate fully. What are they measuring?

A security administrator wants to know which services are running on their mail server. What TWO tools are they most likely to use?

Company A is due to upgrade all its IT systems and has been investigating moving to the cloud as there is no capital expenditure since the CSP provides the hardware. Company A would still like to control the IT systems in the cloud. Which cloud model would best serve Company A's needs?

Which of the following RAID systems uses parity, has a minimum of four disks, and gives you the best resiliency?

A data owner is responsible for the classification of data and deciding who can access the data. Who is responsible for ensuring that the collection of data is legal, that the storage is legal, and that compliance has been carried out at all times? Select the best choice.

You are a security administrator, and the IT director has tasked you with collecting the volatile memory on server 1 as it is currently experiencing a cyber-attack. Which of the following are the two best forms of volatile memory to collect?

At what stage of the SDLC are computer systems no longer supported by the original vendor?

Company A has just developed a bespoke system for booking airline tickets. What is it called when a freelance coding specialist tests it for security flaws?

You are the security administrator for a company that has just replaced two file servers. Which of the following is the best solution for disposing of hard drives that used to store top-secret data?

You are the security administrator for an airline company whose systems suffered a loss of availability last month. Which of the following attacks would most likely affect the availability of your IT systems?

Company A has suffered a DDoS attack, and the company has decided that its RPO should be set at 4 hours. The directors are holding a board meeting to discuss the progress that is being made. During this meeting, the IT manager has mentioned the RTO, and the CEO looks confused. How can you explain the meaning of RTO to the CEO?

Which of the following will prevent certificate fraud and SSL man-in-the-middle attack?

The security team has identified an unknown vulnerability and isolated it. What technique is best for investigating and testing it?

You are the security administrator for your company, and the IT manager has asked you to brief them on XML authentication methods. Which of the following should you tell them uses XML-based authentication? Select all that apply.

An attacker tries to target a high-level executive or manager but has to leave a voicemail as they did not answer the telephone. What attack was carried out?

The auditor has been investigating money being stolen from a charity, and they have discovered that the finance assistant has been embezzling money. The finance assistant was the only person who dealt with finance, receiving donations, and paying all bills. Which of the following is the best option that the auditor could recommend to reduce the risk of this happening again?

James has raised a ticket with the IT help desk. He had been tampering with the settings on his computer and he can no longer access the internet. The help desk technicians have checked the configuration on his desktop and the settings are the same as everyone else's. Suddenly, three other people have also reported that they also cannot connect to the internet. Which network device should be checked first?

Your company is opening a new data center in Galway, Ireland. A server farm has been installed there and now a construction company has come in to put a 6-foot mantrap at the entrance. What are the TWO main reasons why this mantrap will be installed?

What type of trust model do cloud providers use?

What two factors does a forensic examiner need when they are going to investigate a cloud-based attack. Choose two.

An auditor has just finished a risk assessment of the company, and they have recommended that we need to mitigate some of our risks. Which of the following is an example of risk mitigation?

You work for a very large company that has undergone an audit and the auditor has been looking at the amount of data that you hold. The auditor recommended that customers' credit card numbers not be retained once their purchases have been made. Which of the following concepts is the auditor looking at?

Which of the following obtains the consent of a user for the collection of only a minimal amount of personal data for an intended purpose?

The cybersecurity team has set up a honeypot to track the attack vector of newly released malware. As they review the virus, they notice that the hash value of the malware changes from host to host. Which of the following types of malware has been detected?

The cybersecurity team has looked at the latest trends and identified that there has been an increase in brute-force attacks. Which of the following is a random value that can be appended to the stored password to make it more difficult for a brute force password attack to be carried out?

You are the security administrator for a software manufacturer and recently you stopped two new products from being sold as you found security flaws. Which of the following was not completed properly when the software was being developed? At what stage should more action have been taken? (Choose all that apply)

An auditor is carrying out an annual inspection of a SCADA network and finds that the programmable logic controllers (PLCs) have not been updated since last year. Upon further investigation, it is discovered that the company manufacturing these PLCs has gone into liquidation, making these controls end-of-life systems. The manufacturer is currently looking for another company to make an upgraded PLC. Which of the following recommendations should the auditor make to the management team to mitigate the risk in the short term?

The auditor has carried out an inspection of the finance department and has made recommendations that the file server holding the financial data and the desktops of the financial department should use IPsec to secure the sessions between them. The network administrator is going to ensure that only the payload is encrypted. What did the security analyst recommend?

The company wireless network is running very slowly, and users are complaining that they are having problems connecting to the company network but can connect to the internal. The network administrator uses a WiFi analyzer and captures the following information:

1001 12:01:23 host2324 Broadcast 802.11 38 Deauthentication, SN=655 FN=0

1002 12:01:53 host2324 Broadcast 802.11 39 Deauthentication, SN=655 FN=0

1003 12:02:26 host2324 Broadcast 802.11 38 Deauthentication, SN=655 FN=0

What type of attack has the network administrator discovered?

You are an administrator for a college that has 10 intranet web servers, and you need to install an X509 certificate so that they can support HTTPS. You need to use the solution that is the most cost-effective. Which of the following will you use for the certificates?