What concept establishes that the parties involved in an action or event cannot deny having been involved?

Which access control method is described by resource owners having the authority to grant or deny access to other users?

What physical access control method prevents tailgating by ensuring only one individual at a time can authenticate and be granted physical access through a barrier?

Which security category focuses on policies, procedures, and overall management of security within an organization?

Which security category is exemplified by network security, encryption, authentication mechanisms, IDSs, and firewalls?

An organization posts "No Trespassing" signs. What type of security control is this considered?

As part of its critical workflow, an organization relies on a Windows-8-based application. The application cannot be moved to a newer OS, and the organization does not have the technical capability to write a new application for a newer OS. What type of security control should the organization consider?

What is the most effective way to sanitize an SSD and retain use of it?

What data sanitization method involves the use of a magnetic device?

When a new employee first gets a network account created for them (and before they log on for the first time), what part of the IAM framework is complete?

The following statement is an example of what type of access control method: "if request_time == Friday AND current_time >= 6:00 PM THEN deny_access"?

What password policy can prevent users from reusing a specific number of previous passwords?

What is the term used to describe a physical device that generates time-based passwords as an additional layer of security during authentication?

Which is an authentication factor that relies on geolocation or IP geolocation?

What XML-based standard is used to exchange authentication and authorization data between an IdP and an SP?

An organization has taken out a lease for a building that will be used to rebuild their company in the event of a disaster. No work or buildout is being conducted at the newly leased location. What type of site is this considered?

An organization conducts asynchronous replication with a backup site that is fully built out, operational, and staffed. What type of backup site is this?

An organization adds more network components (i.e., load balancers, server clusters, or redundant links) to distribute the load and accommodate increased traffic. What is this process called?

An organization increases the capacity of existing network components by upgrading routers, switches, or server hardware. What is this process called?

Which of the following is NOT a risk transference strategy?

Which of the following is NOT a network segmentation method?

Select the Type 1 hypervisor.

As your network has grown in size, you have begun to abstract connections that move data throughout the network as planes so you can manage them more efficiently. What have you implemented?

You have an SLA with a CSP to provide your web service with six 9s of availability. Over the year, there has only been 1 minute of combined downtime for your web application server. Has the CSP met the terms of the SLA?

Which deployment concept repeats all manual configurations completely, leading to more consistent deployment and management?

While coordinating with a CSP, you would like to better understand the division of responsibilities between you and the CSP. What document should be consulted?

Which of the following is NOT an example of a device that uses an embedded system?

As a sophisticated cyber security organization, you would like to implement a fake but believable production network to detect and analyze malicious attacker techniques. What should you deploy?

You have been tasked with hardening a user workstation. What technique(s) should be applied? (Select all that apply.)

A colleague has recommended a tool that can scan and assess systems against predefined secure configuration baselines. What type of tool has been recommended?

Which Wi-Fi encryption standard utilizes AES-CCMP?

Select the AAA server.

An organization you are joining has offered you a selection of mobile phones to choose from. On your chosen phone, you will have access to the company network and will be able to use it for personal calls and internet browsing. What mobile deployment model is being used?

Which standard outlines security requirements for organizations that handle credit card information?

As part of contingency planning, you have defined RTOs and RPOs for a plan to complement your BCP. What plan are you developing?

Your organization’s SDLC is too rigid and non-responsive to stakeholder changes. What model could you recommend switching to for better responsiveness to change?

An agreement that discusses permissible and prohibited activities with organizationally owned IT assets. What agreement have you implemented?

A former colleague left the company, and subsequently, his remote access credentials were used to access the production network and deploy malware. What process failed to prevent this?

In order to protect your sensitive data, you have created a secure execution environment. What is the state of the data you are protecting?

By applying Full Disk Encryption with BitLocker, what type of data have you protected?

What refers to the idea that data is bound by the regulations and control policies of the country or jurisdiction in which it is situated or originates?

In order to send medical data to an analytics company, you would like to remove and replace the PHI in a way that anonymizes it and leaves it in a format that can be restored to its original condition when returned. What is the BEST way to modify this data?

Select the cryptographic process NOT used for hashing.

Which data role is responsible for enforcing data governance policies to ensure data is collected correctly?

What security zone is most appropriate for a public web server?

Which type of security device is used to create a screened subnet?

A colleague recommends the assignment of permissions and access rights to ensure that users and systems are provided only the minimum access required to accomplish their tasks. What security principle has been recommended?

A network switch defaults to broadcasting all packets through all of its switch ports when it is overloaded, instead of remaining a unicast device. What type of failure mode is this considered?

In a screened subnet, to protect a web server from attacker access, a web server can be configured to only accept administrative connections from which type of server?

Which type of server can be used to prevent employees from accessing social media from their workstations?

Which type of firewall does not retain context or connection state information?

What type of test access point requires a physical break in the communication link?

Which security device must be positioned in-line with network traffic to enable protective action?

Which IEEE standard includes EAP authentication protocols?

Which EAP method may be used if both the supplicant and authentication server have been issued a digital certificate?

Which IPSec mode is appropriate for an untrusted network?

Which IPsec protocol only ensures data integrity and authenticity but does not encrypt the packet payload?

What protocol is used in SFTP to secure the data in transit?

Which hashing algorithm results in a 128-bit hash value?

Select the asymmetric encryption algorithm.

Select the symmetric encryption algorithm.

Which encryption algorithm utilizes a public and private key pair?

Which encryption algorithm can be configured to operate in a stream or block cipher mode?

What level of encryption are FileVault and BitLocker designed to provide?

What key is used to sign a digital signature?

Within the Public Key Infrastructure, what entity signs and issues digital certificates?

Which authorities sign their own certificates?

Which attribute of the X.509 standard is used to identify subdomains that a certificate may be used with and may include a wildcard character?

What type of obfuscation does the following command apply? "C:> Steghide embed -ef input.txt -cf image.jpg -sf output.jpg"

Once a blockchain transaction has been recorded and added to the block, it is virtually impossible to alter or delete. What is this characteristic referred to as?

Digital certificates can be revoked for many reasons. What online responder can be used to validate the revocation status of a specific certificate?

Once a CSR is submitted to a CA, what process is completed prior to the CA signing the certificate?

What stand-alone security device can be used for cryptographic key generation, backup, and rotation supporting multiple machines?