Objective 1.4/Day 2 -

Which cryptographic tool would you use to securely store and manage encryption keys for a large enterprise environment?

Objective 1.4/Day 2 -

Which of the following cryptographic concepts adds unique data to a password before hashing it to prevent rainbow table attacks?

Objective 1.4/Day 2 -

Which certificate component is used to provide real-time status information on the validity of a digital certificate?

Objective 4.5/Day 2 -

Your organization has noticed an increase in unauthorized access attempts to sensitive subnets within the internal network. As a security administrator, you need to enhance the network's security posture by modifying firewall settings. Which of the following actions would be the most appropriate to improve security?

Objective 4.5/Day 2 -

Your organization is experiencing frequent phishing attacks, and employees are accessing websites with poor reputations. As a security administrator, you need to implement a solution that can block access to these websites and protect the organization. Which of the following solutions would be most effective in this scenario?

Objective 4.5/Day 2 -

Your organization has recently implemented a new email security protocol, but employees are still receiving phishing emails that appear to be from trusted internal sources. To mitigate this risk, you need to ensure that only authorized mail servers are allowed to send emails on behalf of your domain. Which of the following actions should you take?

Objective 4.5/Day 2 -

A recent data breach within your organization was traced back to a compromised endpoint. The breach involved sensitive files being altered and exfiltrated. As part of your response, you need to implement security measures that will help detect and prevent similar incidents in the future. Which of the following solutions would be most effective?

Objective 4.6/Day 2 -

A new employee has joined your organization, and you are responsible for setting up their access to various systems and applications. You must ensure that the employee has the necessary access rights based on their role but also prevent them from accessing any resources they don't need. Which of the following actions should you take first to achieve this?

Objective 4.6/Day 2 -

Your organization has partnered with another company, and employees from both organizations need to access each other’s resources. You want to enable seamless access for these employees without requiring them to manage multiple sets of credentials. Which of the following solutions would best address this requirement?

Objective 4.6/Day 2 -

You are tasked with enhancing security for a highly sensitive application used by the executive team. The application requires strict access control, ensuring only authorized users can access specific data. Additionally, the security policy mandates that users must be authenticated using multiple factors before gaining access. Which of the following configurations should you implement to meet these requirements?

Objective 4.6/Day 2 -

Your organization is implementing a new access control system that must enforce strict access policies based on specific rules, such as time-of-day restrictions and user attributes. Additionally, the system must adhere to the principle of least privilege, ensuring that users have the minimum necessary access. Which of the following access control models is best suited for this scenario?

Objective 1.4/Day 2 -

A healthcare organization wants to ensure that their data remains secure both at rest and during transit. They are implementing full-disk encryption for data at rest and TLS for secure communication. Which cryptographic methods should they use?

Objective 1.4/Day 2 -

A company wants to ensure data integrity and authenticity for their email communications. They decide to use a cryptographic method that verifies the sender and ensures the message has not been altered. Which solution should they implement?

Objective 1.4/Day 2 -

An e-commerce business needs to protect customer credit card information in its database to comply with PCI-DSS standards. Which cryptographic method should the business implement to secure this sensitive data?

Objective 4.5/Day 2 -

In a corporate environment, the security team is tasked with strengthening the organization's perimeter defenses. Which configuration adjustment to the firewall would BEST enhance security while minimizing unnecessary exposure?

Objective 4.5/Day 2 -

A company is experiencing an increase in web-based attacks targeting employee workstations. Which technology should the IT department deploy to mitigate these attacks effectively?

Objective 4.5/Day 2 -

An organization wants to enhance its email security posture to prevent phishing attacks and email spoofing. Which solution should the security team implement to achieve this goal?

Objective 4.6/Day 2 -

In a large organization, new employees are frequently onboarded, and existing employees change roles regularly. The IT department needs to streamline the process of granting and revoking access to various systems and resources. Which identity and access management (IAM) feature would BEST address this requirement?

Objective 4.6/Day 2 -

An organization is implementing role-based access control (RBAC) to enforce least privilege principles. Which scenario BEST demonstrates the application of RBAC?

Objective 4.6/Day 2 -

A company wants to enhance its authentication mechanisms to prevent unauthorized access to sensitive systems. Which authentication method provides the STRONGEST level of security?

Objective 4.6/Day 2 -

A multinational corporation wants to provide seamless access to its employees across various subsidiaries without requiring them to log in multiple times. Which identity and access management (IAM) feature would facilitate this requirement?