Which of the following roles is responsible for defining the protection type and classification type for a given set of files?

An employee's company email is configured with conditional access and requires that MFA is enabled and used. An example of MFA is a phone call and:

Which of the following is a security implication of newer ICS devices that are becoming more common in corporations?

Which of the following is required in order for an IDS and a WAF to be effective on HTTPS traffic?

A company policy requires third-party suppliers to self-report data breaches within a specific time frame. Which of the following third-party risk management policies is the company complying with?

While troubleshooting service disruption on a mission-critical server, a technician discovered the user account that was configured to run automated processes was disabled because the user's password failed to meet password complexity requirements. Which of the following would be the best solution to securely prevent future issues?

A security analyst is assessing a newly developed web application by testing SQL injection, CSRF, and XML injection. Which of the following frameworks should the analyst consider?

A user's laptop constantly disconnects from the Wi-Fi network. Once the laptop reconnects, the user can reach the internet but cannot access shared folders or other network resources. Which of the following types of attacks is the user most likely experiencing?

Which of the following procedures would be performed after the root cause of a security incident has been identified to help avoid future incidents from occurring?

A security administrator is integrating several segments onto a single network. One of the segments, which includes legacy devices, presents a significant amount of risk to the network. Which of the following would allow users to access the legacy devices without compromising the security of the entire network?

Which of the following would a security analyst use to determine if other companies in the same sector have seen similar malicious activity against their systems?

Which of the following types of disaster recovery plan exercises requires the least interruption to IT operations?

Which of the following disaster recovery sites is the most cost effective to operate?

A security operations center wants to implement a solution that can execute files to test for malicious activity. The solution should provide a report of the files' activity against known threats. Which of the following should the security operations center implement?

Which concept should a security administrator utilize to ensure all cloud servers have software preinstalled for vulnerability scanning and continuous monitoring?

What should a network architect implement on a server to maintain network availability if one of the network switches it is connected to goes down?

What might a malicious person be doing to cause an employee to receive multiple messages on a mobile device instructing them to pair the device to an unknown device?

Which algorithm should a security administrator use to increase the capacity for an application due to resource exhaustion on another server by splitting the number of connections on each server in half?

Security analysts use which tool to investigate the issue of a network becoming flooded with malicious packets at specific times of the day?

What term best describes the activity of a security administrator who performs weekly vulnerability scans on all cloud assets and provides a detailed report?

Which attack technique involves infecting a website frequently accessed by a company's employees with the hope that the employees' devices will also become infected?

What technique should a digital forensics team use to obtain a sample of malware that was running in memory but never committed to disk?

Which security measure is most likely used to ensure that information provided by a website visitor in a specific field on a form is properly formatted?

When setting up a new firewall on a network segment to allow web traffic while hardening the network, which action would best correct the issue of users receiving errors stating the website could not be located?

Which data classification should be used to secure patient data in a local hospital to ensure it is protected and secure?

What is the security team most likely to document as a security implication of the current architecture when a small business uses kiosks with end-of-life operating systems?

During a security incident, the security operations team identified sustained network traffic from a malicious IP address: 10.1.4.9. A security analyst is creating an inbound firewall rule to block the IP address from accessing the organization's network. Which of the following fulfills this request?

Which of the following is the phase in the incident response process when a security analyst reviews roles and responsibilities?

Which of the following best describes the action captured in this log file?

Which of the following can be used to identify potential attacker activities without affecting production servers?

A company wants the ability to restrict web access and monitor the websites that employees visit. Which of the following options would best meet these requirements?

A security analyst notices an unusual amount of traffic hitting the network's edge. Upon examining the logs, the analyst identifies a source IP address and blocks that address to prevent communication with the network. Despite the analyst blocking the address, the attack continues and comes from a large number of different source IP addresses. Which of the following best describes this type of attack?

A company needs to centralize its records to create a baseline and have visibility over its security events. Which of the following technologies will achieve this goal?

Two organizations are discussing a possible merger. Both organizations' Chief Financial Officers would like to safely share payroll data with each other to determine if the pay scales for different roles are similar at both organizations. Which of the following techniques would be best to protect employee data while allowing the companies to successfully share this information?

A large retail store's network was breached recently, and this news was made public. The store did not lose any intellectual property, and no customer information was stolen. Although no fines were incurred as a result, the store lost revenue after the breach. Which of the following is the most likely reason for this issue?

A government organization is developing an advanced AI defense system. Developers are using information collected from third-party providers. Analysts are noticing inconsistencies in the expected progress of the AI learning and attribute the outcome to a recent attack on one of the suppliers. Which of the following is the most likely reason for the inaccuracy of the system?

Which of the following is the most likely reason for a wireless network outage if the access points are up and running but users in a building near the parking lot cannot connect?

Which of the following can best protect against an employee inadvertently installing malware on a company system?

An information security officer at a credit card transaction company is conducting a framework-mapping exercise with the internal controls. The company recently established a new office in Europe. Which of the following frameworks should the security officer map the existing controls to? (Choose two.)

Which attack method involves using the same password across multiple external websites and the corporate account, which was compromised due to a data breach?

After a natural disaster destroyed an organization's corporate offices, which plan is the organization most likely to consult when setting up offices in a temporary work space?