An employee traveling in Europe for vacation submitted a ticket as they could not access their work email. Which policy does the company use?

A contractor only works for a company from 9 a.m. to 12 p.m. What kind of restriction could the company set up on the contractor's account to prevent using it outside that range?

A cyber engineer conducts a multi-factor authentication (MFA) assessment of an organization's authentication security. What MFA philosophy uses knowledge factors and includes passphrases to gain access to systems?

What type of password is maryhadalittlelamb?

You assign access permissions so that users can only access the resources required to accomplish their specific work tasks. Which security principle are you complying with?

In which form of access control environment is access controlled by rules rather than identity?

What is the primary function of Active Directory as a centralized database in a network?

You are teaching new users about security and passwords. Which of the following is the BEST example of a secure password?

The IT department of a corporation evaluates its security mechanisms to identify areas lacking sufficient protection. Which of the following techniques should the IT department employ?

Which access control model is based on assigning attributes to objects and using Boolean logic to grant access based on the attributes of the subject?

An IT department is using a technique to assess the differences in performance between their systems, looking to see if the systems meet the established requirements. Which of the following terms BEST describes the technique the IT department is using?

You have implemented an access control method that only allows users who are managers to access specific data. Which type of access control model is being used?

You have configured a security device in your network to fail-closed. Which of the following will happen when an attack occurs?

Which technology is primarily used by smart cards to store digital signatures, cryptography keys, and identification codes?

What is the process of controlling access to resources such as computers, files, or printers called?

Which of the following principles is implemented in a mandatory access control model to determine object access by classification level?

Which of the following is the MOST common form of authentication?

When sending confidential data over a network, a company wants to ensure both parties involved cannot deny the validity of the transmitted data. Which security principle should they prioritize?

Which of the following identifies the type of access that is allowed or denied for an object?

Which of the following authentication methods specifically allows users to access multiple systems, applications, or websites using only a single set of credentials?

After a breach, an organization implements new multi-factor authentication (MFA) protocols. What MFA philosophy incorporates using a smart card or key fob to support authentication?

An organization implements a new network infrastructure and plans to use an intrusion prevention system (IPS) for security. The IT manager wants to ensure that the IPS will continue to let traffic flow if it fails. Which failure mode should the IT manager configure the IPS?

What principle of an organization's information security system ensures that only authorized individuals can access sensitive data, the data remains unaltered during storage and transfer, and the data is always accessible when needed?

An employee at a company frequently recycles old passwords when prompted for a password change. What feature of a password policy can prevent this?

You have hired ten new temporary employees to be with the company for three months. How can you make sure that these users can only log on during regular business hours?

One of your company's accountants submitted a ticket stating they could not access a particular section of the accounting software. Why might the accountant not have access to every part of the accounting software?

After finding a corporate phone unattended in a local mall, an organization decides to enhance its multi-factor authentication (MFA) procedures. What MFA philosophy applies a location-based factor for authentication?

Which form of access control is based on job descriptions?

In the context of the NIST Cybersecurity Framework, which function involves identifying, analyzing, containing, and eradicating threats to systems and data security?

Which of the following statements about honeyfiles are true? (Select two.)

An IT team at a global pharmaceutical company has decided to implement a virtual private network (VPN) for remote employees to securely access internal company resources from home. Which of the following is a primary reason for this decision?

Jessica needs to set up a firewall to protect her internal network from the internet. Which of the following would be the BEST type of firewall for her to use?

You are deploying a brand new router. After you change the factory default settings, what should you do next?

In a rapidly evolving IT environment, a cloud service provider offers various services to businesses, enabling them to store and process data securely. To enhance security, the provider regularly updates its systems and software. Despite these efforts, a security researcher discovers a previously unknown vulnerability in one of the cloud-specific applications, leaving customer data exposed to potential threats. In this scenario, which vulnerability is the security researcher likely to have found in the cloud-specific application?

Which of the following applies the appropriate policies in order to provide a device with the access it's defined to receive?

Which of the following is the BEST device to deploy to protect your private network from a public untrusted network?

A financial institution is processing transactions and wishes to improve its security posture. The institution divides its network into different sections to minimize risk while actively updating or retrieving transaction data. What method does the financial institution intend to use?

An attacker was able to gain unauthorized access to a mobile phone and install a Trojan horse so that he or she could bypass security controls and reconnect later. Which type of attack is this an example of?

You are a cybersecurity specialist for a financial institution that is planning to enhance its network security. The institution has decided to adopt a defense in depth strategy. Which of the following approaches would BEST align with a defense in-depth strategy?

You are a network architect for a rapidly growing startup. The startup is planning to expand its operations and is considering a major upgrade to its network architecture. Which of the following factors should be your primary consideration when designing the new network architecture?

Which of the following describes how access control lists can be used to improve network security?

Which of the following BEST describes zero-trust security?

Which of the following should be configured on the router to filter traffic at the router level?

In an effort to increase the security of your organization, programmers have been informed they can no longer bypass security during development. Which vulnerability are you attempting to prevent?

Which VPN tunnel style routes only certain types of traffic?

A VPN is primarily used for which of the following purposes?

Which VPN implementation uses routers on the edge of each site?

Which of the following defines all the prerequisites a device must meet in order to access a network?

Which of the following NAC agent types would be used for IoT devices?